Newspaper  $5.00 


August  28.  2000  Volume  17.  Number  35 


www.nwfusion.com 


Conference:  Oct.  3-6,  2000 
Expo:  Oct.  4-6,  2000 
San  Jose  Convention  Center 

The 

Must  Attend 
Corporate  End-User 
Event! 


For  more  show  information 
and  to  register,  visit: 


www.aspworldexpo.com 


3TD 


The  Smarter 

Way 


to  Do 


ussm 


Application  Service  Providers 

•WORLD 


Conference:  October  3-6,  2000 
Expo:  October  4-6,  2000 
San  Jose  Convention  Center 
San  Jose,  CA 


RENCE  &  EXPO 


Join  us  in  San  Jose 

for  this  exciting,  first-ever  ASP  event 
created  for  corporate  IT  end-users! 


TheSmarter 

Way 

to  Do|^ 


Make  educated  decisions  about  ASP  services  and  products.  Learn 
about  the  entire  range  of  IT  outsourcing  options,  and  get  the  answers 
before  someone  asks  you  the  critical  questions.  Attend  ASPWorld 
Conference  &  Expo  to  learn  everything  you  need  to  know  to  make  the 
right  IT  outsourcing  choices  for  your  business.  Here  are  six  great 
benefits  of  attending: 

•  Access  to  our  resources  and  knowledge — so  you  can  learn  about 
IT  outsourcing  as  an  option  for  your  organization. 

•  You’ll  learn  from  the  experiences  of  other  corporate  end-users 
who  are  also  evaluating  outsourcing  solutions. 

•  You’ll  get  the  research,  the  knowledge,  the  network  of  vendors  and 
colleagues  that  will  give  you  the  competitive  advantage. 

•  The  conference  program  will  address  issues  and  identify 
solutions,  best  practices,  and  successful  case  studies.  More  than 
30  sessions  on  four  tracks  will  meet  the  needs  of  both  ASP 
novices  and  experts. 

•  The  exhibit  floor  is  your  opportunity  to  talk  with  key  managers 
from  ASP  providers,  demo  their  products  and  services,  and  get 
hands-on  previews  of  ASP  solutions. 


Get  the  answers  before  someone 
asks  you  the  questions! 


ASPWorld  Conference  &  Expo  is  the  unique  educational 
opportunity  created  for  corporate  decision-makers. 

Owned  and  managed  by  IDG  World  Expo,  the  event 
management  company  focused  solely  on  events  for  the  IT 
industry,  this  event  delivers  expertise,  information  and 
resources  not  available  elsewhere.  Leading  visionaries, 
analysts,  users  and  suppliers  in  the  ASP  marketplace, 
provide  a  wealth  of  information  via  the  keynote 
presentations,  over  30  conference  sessions,  and 
hundreds  of  exhibits  showcasing  an  immense  variety  of 
solutions. 

You  will  also  receive  a  wealth  of  printed  information  to 
have  at  your  fingertips  for  ready  reference.  And  your 
education  starts  as  soon  as  we  hear  from  you!  When  you 
register  for  ASPWorld  Conference  &  Expo,  you  will 
receive: 


•  Unlike  other  ASP  events,  ASPWorld  Conference  &  Expo  is  geared 
toward  the  corporate  end-user. 


Attention:  Corporate  end-users 

evaluating  ASP  service  options 

Register  by 
September  1,  2000 
and  save  up  to  $130  on 
3  days  of  ASP  Education! 


•  Up-to-date  market  data 

•  Decision  Support  Guide 

•  ASP  Market  Taxonomy 

•  Special  introductory  sessions  about  this  emerging 
market.  See  Web  site  for  details. 

•  Admission  to  conference  keynotes,  and  feature 
presentations. 

•  Expo  badge 


Group  Discounts  - 
register  for  4  Super  Passes, 
the  5th  is  free! 


Call  us  at: 

1-877-696-0459 


Check  the  Web  site  for  detailed  conference 
packages  and  pricing. 


or  visit  us  online  at: 

www.aspworldexpo.com 
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CISCO,  IBM  GET  COZY 


Early  reports  on  the  pair’s  $2  billion  network 
and  service  alliance  sound  positive.  Page  24. 


Researchers  spot  vulnerability  in  PGP  software,  much  to 
the  chagrin  of  original  developer  Zimmermann.  Page  81. 
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^  A  large  Southeastern 

university  IS  team  fights  off 

j  M  a  massive  distributed  denial- 

'  i  V- ImL  of-service  attack  and  lives  to 

tell  about  it.  page  51. 


Start-up  raises  bar  on  ‘Net  QoS 


BY  DENISE  PAPPALARDO 

DUBLIN,  IRELAND  — 
Control  and  predictability  are 
not  synonymous  with  IP,  but 
that’s  exactly  what  start-up 
QoS  Networks  is  promising. 

The  company  is  building  a 
worldwide  IP  network  and 
launching  guaranteed  man¬ 
aged  VPN  services  designed  to 
let  customers  prioritize  and 
better  manage  bandwidth. The 
network  will  essentially  paral¬ 
lel  the  Internet  and  offer  users 
flexibility  without  the  unpre¬ 
dictability  of  the  public  net, 
the  company  says. 

While  the  network  con¬ 
nects  to  the  Internet,  it’s  not 


an  Internet  backbone,  which 
gives  the  service  provider 
more  control. 

The  start-up  is  not  the  first 
out  of  the  gate  with  this  idea, 


but  the  track  is  far  from 
crowded.  CoreExpress  and 
SmartPipes,  which  launched 
earlier  this  year,  are  direct 
competitors.  But  each  has  a 
long  row  to  hoe,  and  each  is 
sowing  a  different  set  of  seeds. 

These  service  providers 
were  born  because  of  the 
See  QoS,  page  16 


Vendors  target 
e-mail  overload 


‘Sieve’  technology  may  become  Internet  standard. 


BY  CAROLYN  DUFFY  MARSAN 

Tired  of  slogging  through 
hundreds  of  e-mail  messages 
each  day?  An  emerging  tech¬ 
nology  called  Sieve  touts  a 
simple,  universal  way  to  create 
filters  for  sorting,  deleting  and 
forwarding  e-mail  messages 
before  they  enter  your  inbox. 

Sieve  is  undergoing  last- 
minute  tweaking  by  engineers 
from  Mirapoint,  Cyrusoft, 
Qualcomm  and  other  e-mail 
vendors.  These  engineers 
recently  asked  the  leadership 
of  the  Internet  Engineering 
Task  Force  to  approve  Sieve  as 
a  standards-track  protocol. 

Sieve  offers  network  man¬ 
agers  several  advantages  over 
the  filtering  capabilities  avail¬ 
able  in  today’s  leading  e-mail 
packages,  such  as: 

•  Providing  a  common  way 


Read  the  draft  that  outlines  the 
Sieve  filtering  language  online. 
DocFinder:  9640 

www.nwfusion.com 


to  create  and  share  e-mail  filters 
across  diverse  e-mail  systems. 

•  Supporting  server-side 
See  Sieve,  page  79 


Help  yourself  to  e-support 


QoS  Networks  CEO  Jim  Valentine 
to  deliver  VPN,  VOIP  services. 


BY  CAROLYN  DUFFY  MARSAN 

©acing  the  double  whammy  of  serving  more  customers 
with  a  shrinking  labor  pool,  a  growing  number  of 
e-businesses  are  embracing  a  strategy  pioneered  by 
fast-food  joints:  self-service. 

However,  these  companies  are  taking  a  high-tech  approach 
to  the  help-yourself  concept  by  creating  technical  support  Web 
sites  that  let  customers  diagnose  and  fix  their  own  problems 
over  the  'Net. 

See  E-support,  page  80 
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THE  FACT  THAT  IT’LL  LOOK  GOOD  ON  YOUR 
IS  TOTALLY  AND  COMPLETELY  IRRELEVANT. 


DESK 


Actual  speeds  depend  on  many  factors,  including  the  plan  you  sign  up  for  with  your  ADSL  provider,  and  are  often  less  than  the  maximum.  !mhz  only  measures  microprocessor  internal  clock  speed;  many  factors  affect  application  performance,  ’gb  equals 
names  are  trademarks  of  International  Business  Machines  Corp.  Intel,  the  Intel  Inside  logo  and  Pentium  are  registered  trademarks  of  Intel  Corporation.  Windows  is  a  registered  trademark  of  Microsoft  Corp.  ©  2000  IBM  Corp.  All  rights  reserved. 


pentium®/// 


the  new  NetVista™  x40  desktop 

Try  as  we  may,  people  don't  listen.  They  see  the  x40  and  make  nontechnological  comments  like  “I  want  one”  and  “Can  I  have 
this  one?”  It’s  enough  to  hurt  an  engineer's  feelings.  The  real  story  here  is  a  simpler  way  to  get  onto  any  network,  fast.  Here's 
the  short  version:  a  75%  less  desk-hungry  all-in-one  design  (for  practical  purposes,  of  course),  integrated  15”  flat-panel  monitor, 
five  very  simple  USB  ports,  internal  PCI  expansion,  preinstalled  ethernet,  and  options  like  ADSL  modems.'  Now  that’s  beautiful. 
IBM  recommends  Windows®  2000  Professional  for  business.  To  order  the  NetVista,  call  800  426  7255  or  visit  ibm.com 

Intel*  Pentium*  III  processor  up  to  667  mhz2  /  64-512mb  sdram  /  up  to  20gb3  hdd  /  Windows*  98  (©business  tools 
or  Windows*  2000  /  cdrom  /  integrated  ethernet  /  $1799-$2299.' 


one  billion  bytes  when  referring  to  storage  capacity;  accessible  capacity  may  be  less.  ‘Estimated  reseller  price  to  end  users  model  6643-13U.  Actual  reseller  prices  may  vary.  PCs  referenced  in  this  ad  include  an  operating  system.  NetVista  and  IBM  product 
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—  IT  service  and  support  issues  escalating? 

—  Help  desk  still  taking  too  long  to  resolve  problems? 

—  Too  much  hardware  and  software  "missing  in  action?" 


Take  Control. 


Introducing  the  HEAT  Service  Optimization  Solutions™  (SOS):  A  comprehensive 
suite  of  service-and-support  software  tools  that  can  change  your  old,  reactive  IT 
department  into  a  new,  proactive  customer  service  center. 

And  that  kind  of  control  can  make  everyone  in  your  company  more  productive. 


Call  toll-free  (800)  776-7889  for  a  FREE  HEAT-SOS  brochure  or  visit  www.heatsos.com/info 
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Email  us  your  funny  it  Service  story  and  we’ll  send  you  a  “Take  Control”  t-shirt.  |f  we  use  your  story 
IN  AN  UPCOMING  AD,  YOU’LL  RECEIVE  A  SPECIAL  GIFT  FROM  HEAT-SOS  ...  DETAILS  AT  WWW.HEATSOS.COM/FUNNY 

Copyright  ©  2000  GoldMine  Software  Corporation.  Heat  and  HEAT  Service  Optimization  Solutions  are  registered  trademarks  of  GoldMine  Software  Corporation.  All  Rights  Reserved. 
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Safe  passage 

E-mail  security  service  providers 
protect  your  sensitive  message  from 
being  read  by  electronic 
eavesdroppers.  Page  44. 


■£% : 


One  netivork  administrator’s  first - 
hand  account  of  a  success  fid  battle 
against  a  distributed  denial-of- 
service  attack.  Page  51. 


Review 


Mobilities  Netivork/Unplugged 
ivins  our  Blue  Ribbon  At  card  as 
the  top  software  for  synchronizing 
data  ivith  laptop  computers  for 
mobile  workers.  Page  57. 


SPECIAL  FOCUS:  ALLIANCE  REVIEW.  Cisco  and  IBM 
report  progress  in  network  union.  Page  24. 


Editorial:  Paying  homage  to  the  VAX.  Page  42. 

Ira  Brodsky:  The  threat  and  promise  of  'Net-based 
democracy.  Page  43. 

Winn  Schwartau  :  Security  hiring  practices  need  to 
come  of  age.  Page  43. 


Carriers  8  ISPs 

27  Regulators  to  review  CLEC  access  to  SBC's  Project  Pronto. 
27  AT&T  Solutions  offering  managed  storage  service. 

29  David  Rohde:  Suit  shines  light  on  DSL  uncertainty. 

Enterprise  Applications 

33  SilverTech  serves  up  hosted  service. 

33  Sigaba  trying  to  simplify  encrypted  e-mail. 

34  McAfee  aims  to  shield  networks  from  PDA  viruses. 

36  Scott  Bradner:  There  may  be  hope  yet  for  phone  companies 


McAfee  guarding  PDAs. 
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Infrastructure 

19  Enterasys  buys  VPN  start-up  Indus  River  for  $170  million. 

19  SkyStream  offering  helps  service  providers  and  companies 
brand  streaming  media  content. 

22  Dave  Kearns:  Directory  services:  Let's  not  reinvent  the  wheel. 


Suneby  lauds  sale. 


Novell  updating  Internet  Caching  System  with  security 
quality-of-service  features. 

Competitors  will  be  able  to  house  gear  in  SBC's 
remote  network-access  enclosures  on  a  trial  basis. 
SonicWall  boosts  performance  of  its  VPN  gear,  but 
keeps  price  the  same. 

Intel  expands  network  switch  role. 

UPS  high  on  new  wireless  ASP  services. 

Lotus  making  wireless  access  strides. 

Symantec  targets  enterprise  with  desktop  firewall. 

RSA  upgrades  security  software. 

Online  tools  aid  internal  help  desks. 

Researchers  find  flaw  in  Network  Associates'  PGP 
public  certificates. 


Technology  Update 

39  Simplifying  the  deployment  of  PKI  with  Hybrid  Auth 
and  XAuth. 

40  Gearhead:  Eagle-eyed  readers  help  correct  errors. 

Management 

63  Digging  for  resources:  Find  out  how  to  improve  your 
research  methods  and  glean  that  nugget  of  product  or 
technology  information  you  need  right  now.  Page  63. 


Get  smart  about  research. 


Backspin:  Plug-ugly  interfaces  down  to  the  bone.  Page  82. 
'Net  Buzz:  Start-up  out  to  stop  that  laptop  thief.  Page  82. 


Net  Know-It-All . Page  16 

Ask  Dr.  Intranet . Page  39 

Message  Queue . Page  42 

Editorial  and  advertiser  indexes . Page  78 
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we’re  not  supposed 
to  talk  about  yet. 


The  most  exciting  new  products  are  the  ones  you  can’t  tell 


anyone  about  yet.  Products  that  can  give  their  creators  a 


huge  market  advantage.  Intuitive,  adaptive,  “smart’ 


products  that’ll  change  the  way  people  live,  work  and 


play.  Made  possible  with  DigitalDNA™  from  Motorola 


DigitalDNA  technology  is  chips,  systems,  software  and 


companies  create  smart  products.  Does  your  company 


have  an  idea  for  one?  We  can  keep  a  secret, 


Contact  us  at  www.digitaldna.com 


from  Motorola 

THE  HEART  OF  SMART 


y'ffftQT.jotorcild.  Inc.  Motoiola.  DigitalDNA  The  Heart  of  Smart,  the  DigitalDNA  Logo 
libido  Stylized  M  Logo  are  trademarks  or  registered  trademarks  ot  Motorola.  Inc 
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INTERACTIVE 
Breaking  news 

We've  got  the  latest  news  for  you,  separated  by  topic.  Visit  our  topic-spe¬ 
cific  news  area,  and  you  can  view  recent  news,  reviews  and  features  by 
subject,  including  Java,  Linux  and  DSL.  You  can  also  search  for  all  the  lat¬ 
est  information  on  your  favorite  vendors.  DocFinder:  9629 

Webcast 

Active  Directory  vs.  Novell  Directory  Services 
IT  managers  are  in  the  middle  of  a  directory  tug-of-war,  and  it's  unclear 
which  service  will  prevail.  To  give  you  a  better  understanding  of  both 
offerings,  log  on  to  "The  Networked  World."  This  month,  we've  got  tech 
execs  from  Microsoft  and  Novell  to  answer  your  questions  about  the  two 
products.  Register  now  for  the  live  Webcast  on  Sept.  8  at  1  p.m.,  EST. 
DocFinder:  9535 


SEMINARS  S  EVENTS 

Implementing  the  new  practices 

Sign  up  today  for  our  State  of  the  LAN  seminar,  which  focuses  on 
putting  in  place  best  practices  for  managing  and  extending  the 
features  and  functionality  of  your  LAN.  DocFinder:  9630 


BARNEY'S  RUBBLE 

The  best  of  the  NetFlash  daily  newsletter 

SBC  sued  over  DSL  speed 

Customers  of  SBC  Communications’  DSL  service  thought 
they  were  getting  a  good  thing  —  download  speeds  of  384K 
bit/sec  and  an  always-on  connection. 

But  some  browsers  found  their  ESPN  sports  clips  and 
Pamela  Anderson  JPEGs  weren't  loading  as  fast  as  they 
should,  and  the  system  would  time  out.  So  they  did  what 
every  red-blooded  American  does  when  they  get  angry  — 
they  sued.  DocFinder:  9636 

Microsoft  sticks  to  its  guns:  Won't  port  Office  to  Linux 

I'm  not  sure  if  it's  good  news  or  bad  news  for  the  Linux 
community  that  Microsoft  is  denying  rumors  that  it  is  porting 
Office  to  open  source.  Office  for  Linux  could  greatly  boost  the 
operating  system's  desktop  presence.  Then  again,  isn't  Linux 
for  people  who  want  to  get  away  from  Microsoft? 

DocFinder:  9637 

Napster  fans  crack  Web  sites  to  get  message  out 

Fans  of  Napster  recently  did  something  idiotic.  No,  they 
didn't  go  out  and  actually  pay  for  CDs.  They  hacked  into  a 
bunch  of  Web  sites  to  protest  Napster's  shabby  treatment  by 
the  courts.  Smooth  move  guys.  DocFinder:  9638 

Ex-Novell  execs  plan  open  source  NetWare 

Recently  Novell  reported  some  rather  lousy  earnings, 
leading  to  all  kinds  of  speculation  about  takeovers  and  spin¬ 
offs.  Now  there  is  more  bad  news.  A  group  of  Novell  ex-patri- 
ots  are  building  an  open  source  version  of  NetWare. 

NetWare  sales  are  slumping  bad  enough  — the  last  thing 
Novell  needs  is  another  competitor.  DocFinder:  9639 

—  Doug  Barney,  executive  editor,  news 

Sign  up  for  this  e-mail  newsletter  online.  DocFinder:  3850 


FORUMS 


COLUMNISTS 


Hacker  insurance 

Companies  are  buying  insurance  plans  that  safeguard  them  in  the  event 
that  their  networks  are  seriously  hacked.  Would  you  buy  such  a  plan? 

DocFinder:  9631 

Certification  =  expert? 

Does  certification  make  you  an  expert?  Some  readers  argue  that  getting 
certified  does  nothing  for  you  if  you  don’t  have  the  experience  to  back  it 

up.  DocFinder:  9537 


ALSO  ONLINE: 

•  Experts  Exchange  Get  your  tough 
network  questions  answered. 

DocFinder:  9523 

•  Test  Pilots  Review  your  favorite 
products.  DocFinder:  9524 


•  Tolly  Research  The  latest  results  from 
testing  experts.  DocFinder:  9525 

•  Newsletter  archives  Check  out  past 
issues  of  our  award-winning  series. 

DocFinder:  9526 

•  Research  centers  Use  our  tech  pages  to 
make  sound  decisions.  DocFinder:  9527 


Water  Cooler 

Banking  on  Cabletron’s  spinoffs 
News  Editor  Bob  Brown  says  Cabletron's  four  prodi¬ 
gies  stand  a  chance  of  doing  much  better  separately 
than  as  a  whole.  DocFinder:  9632 


Compendium 

Dot'Coms  never  die 

Fusion  Executive  Editor  Adam  Gaffin  talks  about  the 
odd  backing  older  dot-coms  get,  how  to  defrag 
DNA,  and  why  talking  about  DSL  is  like  talking 
about  the  weather.  DocFinder:  9633 


View  from  The  Edge 

It’s  still  a  fiber  game  for  office  parks 

Edge  Managing  Editor  David  Rohde  takes  a  look  at 
why  fiber  is  winning  over  DSL  and  ATG's  investment 
in  Quantum  Bridge.  DocFinder:  9634 


What  is  DocFinder? 


We've  made  it  easy  to  access  articles  and  resources  online.  Simply  enter  the  four-digit  DocFinder 
number  in  the  search  box  on  the  home  page,  and  you'll  jump  directly  to  the  requested  info. 
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Copper-based  Gigabit 
Ethernet  is  hot 

Last  quarter  was  a  com¬ 
ing-out  part)'  of  sorts  for 
copper-based  Gigabit  Ether¬ 
net,  analysts  say,  with  ship¬ 
ments  of  lOOOBase-TX 
switch  ports  accounting  for 
nearly  one-fourth  of  all  giga¬ 
bit  ports  shipped  in  the 
second  quarter  of  2000. 

While  Gigabit  Ethernet 
ports  still  accounted  for 
only  3%  of  total  LAN  ports, 
shipments  more  than 
tripled  from  the  second 
quarter  last  year,  according 
to  a  recent  report  issued  by 
Cahners  In-Stat  Group  in  Scottsdale,  Ariz. 
The  firm  predicts  that  port  shipments  will 
reach  four  million  by  year-end,  more  than 
doubling  last  year's  total.  Voice/data  net¬ 
work  convergence  and  the  low  cost  of  giga¬ 
bit-over-copper  technolog)'  are  the  driving 
forces  behind  this  surge  in  Gigabit  Ethernet, 
says  an  industry  analyst  at  Cahners  In-Stat 
Group  who  is  the  author  of  the  report. 

Amazon.com  gets  new  wheels 

Amazon.com,  best  known  for  its  online 
bookstore,  last  week  started  offering  a  car¬ 
selling  service  on  the  Internet  where 
Amazon  shoppers  can  compare  features  in 
hundreds  of  car  models,  configure  the  car 
they  like,  and  place  a  down  payment  using  a 
credit  card. The  customer  is  expected  to  buy 
the  car  directly  from  a  local  dealer,  however, 
by  going  to  the  dealership  or  having  the  car 
delivered.  Amazon  is  getting  into  the  car 
business  through  an  alliance  with 
Greenlight.com,  a  company  in  which  it  took 
a  5%  stake  in  January. 

Watchdog  OKs  online  debit  rule 

NACHA,  the  Herndon,  Va.,  organization 
that  sets  rules  for  electronic  payments  in 
the  financial  industry,  last  week  created  a 
rule  for  Internet-based  processing  of  debits 
to  pay  for  goods  or  services  in  e-commerce. 
As  of  March  16,  2001,  consumers  and  busi¬ 
nesses  will  be  able  to  authorize  debits  to 
their  Automated  Clearing  House  accounts 
via  the  Web,  as  long  as  the  firm  offering 
Internet-based  ACH  payments  follows  secu¬ 
rity  guidelines.  About  20,000  financial  insti¬ 
tutions,  2.5  million  businesses  and  100  mil¬ 
lion  consumers  use  the  ACH  network,  usual¬ 
ly  for  direct  deposit  of  payroll  or  govern¬ 
ment  benefits. 

D.C.  payroll  system  flounders 

The  district  government  of  Washington, 
D.C.,  last  week  said  it  has  been  forced  to 
scrap  a  $20  million  citywide  payroll  system 
that  wasn’t  working  properly.  Under  devel¬ 
opment  since  1991  and  only  operational  for 


one  year,  the  payroll  system 
developed  by  Boston  con¬ 
tractor  Business  Software 
Associates  was  faulted  with 
issuing  incorrect  checks  or 
none  at  all  to  D.C.  employ¬ 
ees.  The  district,  which  had 
switched  half  of  its  43,000 
employees  to  the  new  sys¬ 
tem,  will  revert  to  an  older 
one  at  a  cost  of  about  $5 
million.  D.C.  Chief  Financial 
Officer  Natwar  Gandhi  last 
week  acknowledged  the 
problem  isn’t  only  in  the 
software,  but  also  the 
Byzantine  rules  surrounding 
the  government’s  280  pay 
schedules  for  different  union  work  rules. 

Days  dwindling  for  Iridium  satellites 

Motorola,  the  primary  backer  of  bank¬ 
rupt  satellite  venture  Iridium,  is  in  the 
process  of  creating  a  schedule  to  decom¬ 
mission  Iridium’s  66  low-earth  orbit  satel¬ 
lites.  “There  is  no  time  frame  for  when 
we  ll  finalize  decommissioning,"  Motorola 
spokesman  Scott  Wyman  says.  A  bankruptcy 
court  in  March  gave  Motorola  permission 
to  decommission  the  Iridium  satellite  net¬ 
work.  Since  March,  Motorola  has  spent  sev¬ 
eral  million  dollars  every  month  to  main¬ 
tain  the  network,  Wyman  says.  He  wouldn’t 
give  details  on  the  decommissioning 
process,  which  observers  believe  will  likely 
involve  the  Iridium  satellites  being  left  to 
burn  up  in  Earth's  atmosphere. The  process 
could  take  up  to  two  years,  according  to 
observers. 

Lane  lands  new  job,  rips  Ellison 

Oracle  CEO  Larry  Ellison’s  recently 
departed  second-in-command,  Ray  Lane,  has 
landed  a  new  job  at  venture  capital  heavy¬ 
weight  Kleiner  Perkins  Caufield  &  Byers.  He 
also  landed  a  few  haymakers  on  Ellison  and 
his  former  Oracle  colleagues  last  week  in  an 
interview  with  The 
Wall  Street  Journal. 
“They  aren’t  leaders,” 
Lane  said  of  Ellison's 
remaining  lieutenants. 
“They  just  do  what 
Larry  says.”  Lane  also 
accused  Ellison  of  hav¬ 
ing  encouraged  the 
sale  of  products  that 
did  not  exist,  a  charge 
to  which  Ellison 
responded:  “He  is  the 
soul,  the  conscience  of 
Oracle,  and  the  other 
45,000  of  us  arc  criminals?  . .  .We  don’t  sell 
products  that  don’t  exist  because  it’s  against 
the  law.”  .  .  .  Don’t  expect  to  see  these  two 
vacationing  together  anytime  soon. 
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Novell  bolsters  caching 
security  and  QoS 


BY  DENI  CONNOR 

PROVO,  UTAH  —  Novell 
shipped  a  version  of  its 
caching  software  last  week 
that  lets  system  administrators 
set  policies  to  guarantee  quali¬ 
ty  of  service  and  speeds  secure 
access  to  Internet  content. 

The  company’s  Internet 
Caching  System  1.3  (ICS) 
shipped  last  week  to  system 
OEMs  for  integration  into 
servers  and  appliances.  ICS  1.3 
lets  administrators  authenticate 
users  for  access  to  Internet 
content  and  bandwidth,  and 
encrypt,  decrypt  and  acceler¬ 
ate  Secure  Sockets  Layer  (SSL) 
e-business  transactions. 

With  the  authentication 
capabilities  of  the  RADIUS 
remote  access  standard  and 
Lightweight  Directory  Access 
Protocol,  administrators  can 
filter  the  content  that  is 
cached  by  user,  content  type 
or  bandwidth  percentage,  and 
enforce  QoS  guarantees  to 
customers.  For  instance,  a 
school  may  want  to  guarantee 
that  75%  of  its  Internet  con¬ 
nections  are  reserved  for  stu¬ 
dents  or  that  only  teachers 
have  unlimited  access  to 
Internet  content. 

ICS  1.3  also  works  with 
content-filtering  programs 
from  companies  such  as 
N2H2,  Packeteer  and  Sitara. 
Novell  is  expected  to 
announce  partnerships  with 
these  companies  in  the  near 
future. 

ICS  1.3  is  the  first  ver¬ 
sion  that  supports  Novell’s 
upcoming  streaming-media 
and  SSL  modules. 

The  SSL  module,  code- 
named  SSLizer,  provides 
access,  authentication  and 
secure  communications  over 
the  Internet,  while  regaining 
the  speed  lost  by  servers 
in  processing  transactions. 
SSLizer,  a  bolt-on  software 
module  to  ICS,  is  expected  to 
be  released  later  this  year. The 
1.3  release  also  supports 
HTTP  streaming,  which  han¬ 
dles  large  files  on  the 
Internet. 

“Midsize  businesses  that  are 
outsourcing  their  Web  pres¬ 
ence  to  a  service  provider  are 
going  to  want  to  sell  and  track 


their  businesses  [using  SSL] 
over  the  Web,”  says  Mark 
Melenovsky,  an  analyst  with 
market  research  firm  IDC  in 
Framingham,  Mass. “SSL  will  be 
a  huge  boon  for  the  modular 
[software]  market  that  lets 
e-commerce  take  place.” 

IDC  projects  sales  of 
caching  appliances  will 
increase  fivefold  to  more  than 
100,000  by  2003. 

“Large  enterprises,  which 
are  keeping  a  lot  of  that 
Internet  and  Web-centric  data 
in-house  in  their  own  data 
centers,  represent  a  huge  mar¬ 
ket  for  caching,”  Melenovsky 
says. 

Novell  has  also  done  work 
in  ICS  1.3  to  improve  the  per¬ 
sistence  of  connections  in 
reverse  proxy  mode,  in  which 
the  caching  system  sits 
between  a  Web  server  and  the 
Internet,  filtering  and  speed¬ 
ing  content  delivery  to  users. 
ICS  will  also  support  the  use 
of  certificates  for  reverse 
proxy;  if  the  user  has  been 
issued  a  certificate  by  a  server 
that  then  fails,  another  caching 
server  will  maintain  that  cer¬ 
tificate  so  it  is  not  lost. 

ICS  1.3  also  supports 
Cisco’s  Web  Cache  Control 
Protocol,  a  Cisco  routing  pro¬ 
tocol  that  lets  the  cache  server 
communicate  status  back  to  a 
router  and  maintain  cache 
transparency. 

In  addition,  Novell  has 
improved  the  FTP  log  push 
capability,  which  lets  adminis¬ 
trators  more  accurately  moni¬ 
tor  traffic  passing  through  the 
caching  server. 

“Dell.com  is  a  perfect  exam¬ 
ple  of  the  need  for  better  log¬ 
ging,”  says  Darrel  Ward,  prod¬ 
uct  manager  at  Dell  in  Austin, 
Texas. 

“We  track  the  performance 
of  Dell.com  with  logs,  which 
report  back  traffic  patterns.  If 
you  don’t  handle  logs  correct¬ 
ly,  you  won’t  have  a  clear  pic¬ 
ture  of  the  traffic  or  business 
that  flows  through  the  site,”  he 
added. 

Dell,  Compaq  and  IBM  will 
ship  their  appliances  that 
include  ICS  1.3  in  September. 
Stratacache  will  immediately 
ship  the  ICS  product  with  its 
caching  devices.  3 
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SBC  opens  door  to  DSL  competitors 

Competitors  could  house  gear  in  SBC’s  remote  network-access  enclosures. 


SBC  to  share  with  competitors 

During  a  trial  period  SBC  Communications  will  let  other  carriers 
sell  DSL  to  customers  served  by  their  small  neighborhood 
remote  terminals  housing  telecom  access  gear. 

Competitors  will  use  the  SBC  gear  that  fills  these 


BY  TIM  GREENE 

SAN  ANTONIO,  TEXAS  — 
Despite  SBC  Communica¬ 
tions’  plan  to  open  its  neigh¬ 
borhood  DSL  access  gear  to 
competitors  on  a  trial  basis, 
some  competitors  say  the 
move  won’t  actually  increase 
competition. 

The  trial  gives  competitive 
local  exchange  carriers 
(CLEC)  specializing  in  DSL 
the  chance  to  reach  millions 
of  DSL  customers  who  would 
otherwise  be  inaccessible. 
The  CLECs,  though,  will  be 
allowed  to  sell  only  the 
speeds  and  flavor  of  DSL  that 
SBC  offers,  not  introduce 
competing  options. 

“We  don’t  fully  support  the 
trial,  but  we  have  to  do  some¬ 
thing,”  says  Brian  Farley,  asso¬ 
ciate  general  counsel  for 
Rhythms  NetConnections, 
one  of  the  CLECs  participat¬ 
ing.  The  alternative  is  not  hav¬ 
ing  any  chance  to  sell  DSL  to 
millions  of  SBC  customers,  he 
says. 

The  trial  does  give  the  CLECs 
the  chance  to  gain  experience 
placing  orders  with  SBC  and 
working  out  billing  proce¬ 


dures,  says  Covad  Commu¬ 
nications,  another  CLEC  in  the 
trial. 

From  SBC’s  perspective, 
the  trial  demonstrates  to  state 
and  federal  regulators  that 
SBC  is  attempting  to  open  its 
network  to  competitors, 
something  required  by  the 
Telecommunications  Reform 
Act  of  1996,  says  Jeff  Moore, 
an  analyst  with  Current 
Analysis  in  Sterling,  Va. 

“SBC  has  plenty  of  incen¬ 
tive  to  stay  on  the  right  side 
of  the  regulators,”  Moore  says. 
“They  have  other  irons  in 
the  fire,  like  getting  [regula¬ 
tors’]  permission  to  sell  long¬ 
distance.” 

CLECs  install  their  own 
DSL  equipment  in  the  switch¬ 
ing  offices  owned  by  the  tra¬ 
ditional  local  carriers  such  as 
SBC.  But  millions  of  cus¬ 
tomers  get  local  phone  ser¬ 
vice  over  wires  that  originate 
not  in  switching  offices  but  in 
remote  cabinets  that  house 
switching-office  access  gear 
called  digital  loop  carriers 
(DLC).  Switching  offices  are 
entire  buildings  that  generally 
have  space  for  CLEC  equip¬ 
ment,  but  DLC’s  are  housed 


in  tiny  weatherproof  enclo¬ 
sures  where  space  is  at  a 
premium. 

SBC  and  other  traditional 
carriers  say  there  is  no  room 
for  CLEC  equipment  in  these 
enclosures.  The  Federal  Com¬ 
munications  Commission  is 
considering  whether  to  force 
the  carriers  to  open  up  these 
remote  terminals  to  CLECs 
(see  “FCC  to  review  CLEC 
access  to  Pronto,’  ”  page  27). 

During  the  trial,  11  com¬ 


petitors  will  be  allowed  to  sell 
DSL  services  to  customers 
served  by  remote  terminals 
but  will  have  to  do  so  by 
using  wires  and  DSL  Access 
Multiplexers  (DSLAM)  con¬ 
trolled  by  SBC. 

This  means  the  CLECs  can 
offer  only  asymmetric  DSL. 
One  of  the  trialing  CLECs, 
Birch  Telecom  in  Kansas  City, 
Mo.,  says  it  generally  sells 
symmetric  DSL  in  areas  where 
it  uses  its  own  DSLAMs.  B 


SonicWall  teams  with  VeriSign  on  digital  certificates 

VPN  will  now  automate  setting  up  digital  certificate  exchanges. 


BY  TIM  GREENE 

SUNNYVALE,  CALIF.  — 
SonicWall  is  adding  something 
new  to  its  bag  of  VPN  tricks: 
support  for  digital  certificates 
that  authenticate  users  for  the 
purpose  of  exchanging  encryp¬ 
tion  keys  used  to  secure 
Internet  connections. 

In  conjunction  with  Veri¬ 
Sign,  which  specializes  in  digi¬ 
tal  certificates,  SonicWall  has 
developed  software  for  its  VPN 
appliances  that  automates  set¬ 
ting  up  digital  certificate 
exchanges.  SonicWall  calls  the 
new  capability^  Trusted  VPN, 
and  it  will  be  available  on  its 
SOHO,  DMZ,  XPRES,  PRO  and 
PRO-VX  VPN  appliances  and 
gateways. 

Before,  if  SonicWall  cus¬ 


tomers  wanted  to  use  digital 
certificates,  the  certificate  sup¬ 
port  had  to  be  integrated  sepa¬ 
rately,  a  complicated  process 
which  many  com¬ 
panies  could  not 
handle  owing  to  a 
lack  of  expertise. 

The  VPN  boxes 
will  be  able  to 
exchange  certifi¬ 
cates  with  other 
SonicWall  gate¬ 
ways  to  establish 
that  each  is  autho¬ 
rized  to  use  the 
VPN.  Based  on 
that  authoriza¬ 
tion,  the  machines 
can  be  issued 
encryption  keys  used  to 
encode  traffic. 

As  part  of  the  digital  certifi¬ 


cate  support,  SonicWall  will 
act  as  a  certificate  authority, 
issuing  and  revoking  digital 
certificates  so  customers  don’t 
have  to  set  up 
their  own  author¬ 
ities  or  seek  a 
third  party. 

With  the  addi¬ 
tion  of  Trusted 
VPN,  SonicWall 
gear  is  now  capa¬ 
ble  of  establishing 
secure  Internet 
VPNs,  supplying 
firewalls,  screen¬ 
ing  for  viruses 
and  blocking 
access  to  Internet 
sites.  In  adding 
features,  SonicWall  has  teamed 
with  partners  such  as  Network 
Associates  for  antivirus  soft¬ 


ware  and  The  Learning  Com¬ 
pany  for  content  filtering. 

In  the  future,  Sonic  wall  will 
team  with  other  vendors  to 
add  intrusion  detection  and 
bandwidth  management  sup¬ 
port,  says  Larry  Woodard, 
SonicWall’s  director  of  prod¬ 
uct  marketing.  The  company 
also  plans  to  add  security 
auditing  to  its  VPN  packages, 
he  says. 

More  power,  same  price 

In  another  area,  SonicWall 
plans  within  the  next  45  days 
to  boost  the  processing  power 
of  its  SOHO  VPN  hardware  to 
bring  about  a  tenfold  improve¬ 
ments  in  firewall  and  VPN  per¬ 
formance.  Base  price  will 
remain  $500. 

SonicWall:  sonicwall.com 


The  worldwide  VPN 
hardware  market, 
including  appliances 
for  branch  and  home 
offices,  will  be 
worth  a  projected 
$10.8  billion  in  2003. 

SOURCE:  THE  YANKEE 
GROUP.  BOSTON 


Intel  expands 
network 
switch  role 

BY  APRIL  JACOBS 

SAN  JOSE  —  Intel  last  week 
announced  a  slew  of  compo¬ 
nents  that  could  result  in  less 
expensive  enterprise  network 
switches  and  routers. 

Intel  has  proven  itself  as  a 
supplier  of  aggressively  priced 
switches  and  routers  for  small 
company  and  remote  office 
networks.  The  company’s  new 
Media  Switch  components 
will  give  Intel  an  entree  into 
the  equipment  market  for 
larger  enterprise  networks  — 
though  as  a  supplier  to  the 
actual  box  makers. 

Intel,  which  unveiled  the 
Media  Switch  line  of  10M 
bit/sec,  100M  bit/sec  and  1G 
bit/sec  Layer  2, 3  and  4  switch 
and  router  components  at  the 
Intel  Developer  Forum,  could 
not  predict  just  how  much  its 
new  offerings  will  cost  by  the 
time  they  reach  end  users  as 
finished  products.  But  Intel’s 
economies  of  scale  in  mass- 
producing  processors  should 
enable  the  company  to  deliver 
components  that  result  in  rel¬ 
atively  inexpensive  products 
from  other  switch  and  router 
vendors,  says  William  Hurley, 
an  analyst  with  the  Yankee 
Group  in  Boston. 

Intel’s  components,  for 
eight-  and  24-port  devices, 
will  come  bundled  with  the 
APIs,  protocol  stacks  and 
source  code  that  should  let 
switch  and  router  makers 
build  devices  quickly  and 
enable  them  to  handle  typi¬ 
cal,  as  well  as  advanced, 
applications,  such  as  voice 
over  IP  and  media  streaming. 
The  new  components  will 
start  shipping  in  the  fourth 
quarter. 

Peer-to-peer  pressure 

Also  at  its  conference  last 
week,  a  top  Intel  official 
declared  the  company’s  sup¬ 
port  for  peer-to-peer  (P2P) 
networking  (a  la  the  Napster 
music  sharing  technology), 
which  he  said  could 
become  an  important  tool 
for  businesses. 

Broadly  speaking,  P2P  net- 

See  Intel,  page  16 
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UPS  high  on  new  wireless  ASP  service 


BY  JOHN  COX 

ATLANTA  —  Wireless  appli¬ 
cation  service  provider 
Air2Web  this  week  will  unveil 
a  service  based  on  Java  and 
XML  that  enterprises  can  use 
to  deliver  corporate  data  to 
wireless  devices. 

Here's  how  the  service, 
called  Always  Interactive, 
works.  Companies  that  want  to 
let  users  of  handheld  devices 
access  corporate  data  tell 
Air2Web  what  the  data  is  and 
how  it  should  be  presented. 
Air2Web  can  accept  calls  from 
almost  any  device  that  con¬ 
nects  via  a  wireless  carrier. 


CAMBRIDGE,  MASS.  — 
Lotus  last  week  took  another 
step  to  match  Microsoft  as  the 
two  scramble  to  provide  enter¬ 
prise  users  with  wireless 
access  to  applications  running 
on  their  respective  messaging 
and  collaboration  servers. 

Lotus  formed  an  alliance 
with  Sprint  that  allows  compa¬ 
nies  running  Domino  to  use 
the  Mobile  Notes  Client  on 
Sprint  PCS  phones  to  access 
e-mail,  calendar  and  corporate 
directory  information.  The 
alliance  is  one  aspect  of 
Sprint’s  Wireless  Web  for 
Business  suite  of  enterprise 
access  products.  Lotus  already 
supports  phones  and  services 
from  AT&T  and  Verizon. 

But  support  for  Mobile 
Notes  on  various  phone  hand¬ 
sets  is  only  a  half-step  for 
Lotus.  The  real  breakthrough 
for  wireless  support  on 
Domino  begins  this  fall  when 
the  company  is  expected  to  go 
into  beta  with  Mobile  Services 
for  Domino.  The  server-side 
soft  ware,  which  is  expected 
to  ship  early  next  year,  will 
support  wireless  access  to  a 
range  of  applications  running 
on  Domino  —  not  just  e-mail 
or  contact  information. 

Lotus  and  Microsoft  are  try¬ 
ing  to  extend  wireless  access 
beyond  simple  messaging  fea- 


Incoming  requests  from  the 
wireless  devices  are  handled  by 
the  Air2Web  software.  The  soft- 


tures  and  into  collaborative 
applications  that  are  attractive 
to  corporate  users. Those  could 
include  workflow  programs 
that  are  kicked  off  by  data  input 
from  users  in  the  field. 

Microsoft  earlier  this  month 
announced  its  own  wireless 
access  to  Exchange  Server 
5.5.  Microsoft  and  Wireless 
Knowledge,  a  company  that 
Microsoft  co-founded  with 
Qualcomm,  will  use  the 
Wireless  Knowledge  Workstyle 
Server  3-0  as  a  platform  for 
developing  wireless  applica¬ 
tions  for  Exchange.  Currently 
the  WorkStyle  Server  provides 
wireless  access  to  Exchange 
5.5  but  only  for  e-mail,  calendar 
and  contact  information. 

Wireless  is  fast  becoming  a 
sought-after  means  of  accessing 
important  collaboration  infor¬ 
mation  running  on  corporate 
messaging  servers.  Research 
firm  IDC  estimates  that  the 
number  of  users  of  wireless 
phones  in  the  U.S.  will  jump 
from  7.4  million  today  to  61.5 
million  in  2003.  IDC  predicts 
half  of  the  U.S.  workforce  will 
need  mobile  access  by  then. 

“E-mail  has  become  a  com¬ 
modity;  you  can  get  it  from 
any  number  of  places  without 
going  to  Lotus  or  Microsoft,” 
says  Joyce  Graff,  an  analyst  with 
the  Gartner  Group.  “So  their 
long-term  future  is  not  e-mail, 
it’s  establishing  themselves  as 


ware  packages  the  request  in 
XML  and  sends  it  to  the  cus¬ 
tomer’s  Web  site.  There,  the 


an  application  base  not  only  for 
internal  needs,  but  also  for 
those  of  the  extranet  and 
beyond.  They  would  both  love 
to  be  the  application  platform 
for  wireless.” 

Both  companies  have  been 
adding  collaboration  features 
to  their  servers  over  the  past 
two  years  that  let  enterprise 
users  build  sophisticated  appli¬ 
cations  available  to  a  distrib¬ 
uted  workforce.  Now  both 
want  to  ensure  that  those  appli¬ 
cations  are  available  from  a 
variety  of  clients. 

The  upcoming  Mobile  Serv¬ 
ices  for  Domino  will  include 
a  development  kit  that  will 
let  organizations  and  indepen¬ 
dent  software  vendors  wire¬ 
less-enable  their  applications. 

But  enterprise  users  won’t 
be  able  to  magically  port  appli¬ 
cations  to  a  wireless  client  — 
they  will  need  to  rewrite  cur¬ 
rent  applications.  “Enterprises 
will  have  to  be  selective  as  to 
what  applications  have  the 
biggest  payoff  for  mobile  work¬ 
ers,”  Graff  says.  “It’s  a  nontrivial 
issue,  and  it  does  take  some 
application  redesign.”  B 


needed  data  is  pulled  from  the 
corporate  databases,  packaged 
again  in  XML  and  sent  back 
to  Air 2 Web.  Finally,  the  Air2Web 
software  creates  a  presentation 
display  or  voice  message  for 
the  original  device. 

Air2Web’s  breadth  of  device 
support  is  what  attracted 
Atlanta’s  package  delivery  giant 
United  Parcel  Service.  UPS, 
which  is  putting  the  final 
touches  on  a  new  wireless  ser¬ 
vice,  due  out  next  month,  will 
use  the  service  to  let  handheld 
users  track  packages,  find  UPS 
drop-off  boxes,  determine  the 
cost  of  shipping  and  find  out 
how  long  shipments  will  take. 

UPS  already  lets  users  of  the 
wireless  Palm  VII  access  some 
of  this  information  through 
Palm.net.  But  far  more  people 
are  using  pagers  or  mobile 
phones  that  can  send  and  get 
compact  messages  via  the 
Short  Message  Service  (SMS). 
“We  wanted  to  let  many  more 
users  access  UPS  functionality,” 
says  Robert  Conner,  UPS’  direc¬ 
tor  of  interactive  marketing. 


UPS  evaluated  10  integrators 
and  service  providers.  “No  one 
could  offer  the  platform  sup¬ 
port  Air2Web  offered,”  Conner 
says.  “Once  they  received  an 
API  from  us,  they  could  format 
our  data  and  send  it  to  an  SMS 
or  Research  in  Motion  pager,  or 
a  Web  phone.  That  opened  the 
market  for  us  to  cover  a  much 
larger  area  of  the  country.” 

Developing  the  new  service 
has  been  “very  smooth.  I  can’t 
tell  you  how  well  it’s  gone,” 
Conner  says. 

One  reason  for  that  smooth¬ 
ness  is  that  using  a  wireless  ASP 
service  freed  UPS  to  focus  on  a 
small  set  of  manageable  issues: 


what  data  will  be  accessible 
and  how  it  will  be  displayed. 

Because  the  data  exchanged 
between  Air 2 Web  and  UPS, 
which  Air2Web  calls  a  “conver¬ 
sation,”  is  carried  out  in  stan¬ 
dard  XML,  neither  side  has  to 
know  the  intricacies  of  the 
other’s  data  and  application 
architecture,  says  Dale  Gon¬ 
zalez,  Air2Web’s  vice  president 
of  wireless  devices.  So  devel¬ 
opment  of  applications  is  sim¬ 
pler  and  faster  than  traditional 
programming. 

Even  user  registration  is  sim¬ 
ple.  Users  register  via  a  provi¬ 
sioning  application  developed 
by  Air2Web  that  appears  to  be 
on  UPS.com.  For  cell  phone 
users,  the  application  reads  the 
user’s  phone  number  and 
deduces  preliminary  informa¬ 
tion  about  the  device,  the  net 
and  the  carrier.  Users  are  then 
prompted  with  pictures  of  the 
phone  models  supported  by 
their  carrier,  and  they  click  on 
the  one  they  use. 

The  core  of  Air2Web’s  ser¬ 
vice  is  BEA  Systems’  BEA 
WebLogic  application  server. 
Most  of  the  software  is  written 
in  Java,  with  some  parts  in  C++. 
As  a  result,  Air2Web  plans  to 
add  support  for  some  powerful 


transaction-oriented  applica¬ 
tions,  not  just  information 
retrieval. 

“We  can  transfer  money,” 
Gonzalez  says.  “We  ll  soon  be 
rolling  out  direct  billing,  where 
users  can  charge  small  pur¬ 
chases  to  their  phone  bills. 
And  we’re  planning  to  deliver 
secure  credit  card  payments.” 

Air2Web  is  offering  Always 
Interactive  as  an  application 
platform,  with  an  API  that  devel¬ 
opers  can  call  to  m;ike  use  of 
the  wireless  service  instead  of 
having  to  create  their  own. 

Pricing  ranges  from  $475  for 
100  users  to  $9,350  for  5,000 
users.  B 


Airborne  data 

Wireless  application  service 
provider  Air2Web  s  software  sits 
between  wireless  carrier  nets  and 
corporate  databases.  Here,  a  UPS 
customer  with  a  screen  phone 
checks  on  the  status  of  a  package. 
Air2Web  can  deliver  the  same  data, 
in  different  formats,  to  PDAs, 
interactive  pagers  and  even  digital 
cellular,  voice-only  phones. 


Lotus  making  wireless  access  strides 


Lotus  and  Microsoft  are  racing  to  connect  mobile  workforces. 

BY  JOHN  FONTANA 


PROFILE:  AIR2WEB 


Location: 

Atlanta 

Primary  business:  Wireless  service  linking  handheld  users  to  corporate 
databases. 

Founded: 

August  1999 

Founders: 

Sanjoy  Malik,  president  and  CEO;  Jay  Chaudhry,  chairman. 

Funding: 

$35  million  from  iGate  Capital  and  a  small  group  of 
investors. 

Customers: 

UPS,  Total  Sports,  Digital  Insights,  FansOnly  Network 

Employees: 

100 

Fun  Fact: 

Low-key  founder  Jay  Chaudhry,  worth  about  $750  million 
on  paper,  a  few  months  ago  finally  traded  in  his  1984 
Honda  Prelude  for  a  Lexus  sports  utility  vehicle. 
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Dart-Poison  Frog 

Measures  no  longer  than  the 
length  of  your  thumb,  but  can  kill 
25,000  people  with  a  single 
of  its  poisonous  sweat. 


Fig  1.  Small  size 


—  yet  possesses  the  deadliest  defense  on  Earth 


Introducing  the  NetScreen-1000 .  Ensuring  untouchable  network  security .  This  one  box 
provides  you  with  the  most  complete,  powerful,  and  scalable  security  system  available,  capable  of  handling  1 00 
secure  customer  domains,  500,000  concurrent  TCP  sessions,  and  25,000  VPN  tunnels  all  at  gigabit  speed. 
This  is  the  only  total  solution  that  can  improve  performance  while  reducing  the  complication  and  cost  of  deploying 
security.  Adding  new  customers  is  easy,  allowing  you  to  generate  not  only  new  business,  but  new  revenue,  simply. 
Call  1-8 77  NETSCREEN  or  visit  www.netscreen.com/NSl 000  and  learn  how  this  potent 
solution  can  provide  you  with  the  best  possible  security.  NetScreen- 1 000.  The  newest  addition 

to  a  family  of  security  solutions.  Broadband  Internet  Security  Solutions  NetScreen 


News 


Symantec  targets  enterprise  with  desktop  firewall 

Some  say  these  personal  firewalls  will  become  more  important  than  traditional  corporate  firewalls. 


BY  ELLEN  MESSMER 

CUPERTINO,  CALIF.  —  Symantec 
this  week  will  ship  its  first  desktop 
firewall  for  business  users,  adding  a 
range  of  network  management  and 
VPN  features  not  found  in  the  home 
PC  version  of  the  product. 

The  Desktop  Firewall  2.0  is  man¬ 
aged  by  a  systems  administrator 
through  Web-based  installation  soft¬ 
ware  that  can  be  added  to  the  corpo¬ 
rate  intranet. 

An  end  user  requiring  the  desktop 
firewall  for  his  PC  must  complete  a 
Web-based  registration  process  before 
downloading  the  software. The  firewall 
can  also  be  managed  through 
Microsoft’s  Systems  Management 
Server  software. 

“Unlike  with  the  consumer  version 
of  our  product,  we  are  making  sure 
the  administrator  is  controlling  the 


Making  desktops  safer 

Symantec's  Desktop  Firewall  2.0 
features: 

•  Enables  remote  management  by  security 
administrator. 

•  Scans  for  Trojan  malicious  code,  such  as 
Back  Orifice. 

•  Works  with  VPNs  from  Nortel,  Cisco  and 
Altiga. 


firewall  rules,  not  the  end  user,”  says 
Nat  Maple,  a  senior  product  manager 
at  Symantec. 

Still  a  new  phenomenon  compared 
with  the  more  common  corporate 
gateway  firewalls,  personal  desktop 
firewalls  are  gaining  attention  as  an 
important  measure  to  prevent  com¬ 


puter  break-ins  attempted  by  hackers 
exploiting  the  “always-on”  Internet  con¬ 
nections  afforded  by  cable  modems 
and  DSL. 

“The  personal  firewall  may  well 
become  more  significant  in  the  long 
run  than  the  corporate  firewall,”  says 
Peter  Lindstrom,  senior  analyst  at 
Hurwitz  Group,  a  Framingham,  Mass., 
consultancy. 

In  addition  to  Symantec,  Watch- 
Guard,  Network-1  Security  Solutions, 
ConSeal,  Sybergen,  Zone  Labs  and 
Network  ICE  are  marketing  desktop 
firewalls. 

Among  the  other  new  features  in 
the  enterprise  version  of  Symantec’s 
software  is  its  ability  to  scan  for  Trojan 
horses,  such  as  Back  Orifice,  a  stealth 
program  that  lets  hackers  remotely 
commandeer  a  computer  once  it  has 
been  infected. 

Another  difference  between  the 


business  and  consumer  versions  is  that 
the  business  version  supports  VPN 
client  software. 

It  works  with  VPN  technology  from 
Nortel  and  Cisco  (as  well  as  from 
Altiga,  a  company  Cisco  bought). 
Symantec  plans  to  add  support  for 
Check  Point  VPN  technology.  However, 
there  are  currently  no  plans  to  support 
the  Layer  2  Tunneling  Protocol-based 
VPN  in  Windows  2000. 

Pricing  for  the  firewall  varies,  but  it 
is  listed  at  $27  per  node  for  a  500-user 
license,  which  includes  one  year  of 
technical  support  and  free  upgrades. 

Symantec:  www.symantec.com 
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RSA  upgrading  its  Keon  PKI  security  software 


Keon  package  now  supports  digital  certificates  from  more  vendors,  including  Baltimore,  Netscape  and  IBM. 


BY  ELLEN  MESSMER 

BEDFORD,  MASS.  —  RSA  Security  this 
week  will  unveil  an  upgraded  version  of 
its  public-key  infrastructure  software, 
adding  support  for  digital  certificates 
from  multiple  vendors  and  making  it  eas¬ 
ier  for  security  administrators  to  register 
users  to  receive  certificates  through  an 
automated  download  process. 

Available  for  Windows  NT  or  Unix, 
RSA’s  Keon  5.5  suite  includes  a  certifi¬ 
cate  server  for  managing  user  registra¬ 
tion  and  a  security  server  for  storing  the 
digital  credentials.  Users  get  client  soft¬ 
ware  that  lets  a  Keon  X.509  certificate 
—  and  now  certificates  from  Baltimore, 
Netscape  and  IBM  —  be  used  in  multi¬ 
ple  applications  for  signing  electronic 
documents,  encrypting  them  or  simply 
proving  identity  on  the  Web. 

Previously,  Keon  only  supported  cer¬ 
tificates  from  RSA  and  VeriSign.  Soon, 


RSA  plans  to  add  support  for  Microsoft 
certificates,  says  Lina  Liberty,  RSAs 
director  of  product  management. 

Keon,  which  debuted  one  year  ago,  is 
used  by  about  100  customers  in  either 
pilot  or  production  mode.  Liberty  says. 

One  customer,  Eastern  Corporate 
Federal  Credit  Union,  which  provides 
financial  services  to  roughly  175  credit 
unions,  has  distributed  hundreds  of 
Keon  digital  certificates  to  customers. 
The  main  use  of  the  certificates  is  to  let 
credit  union  employees  gain  access  to 
sensitive  information  at  the  www. 
eascorp.com  Web  site  by  proving  their 
identity,  says  Chris  Smith,  president  of 
computer  information  systems  at  the 
Woburn,  Mass.,  company. 

Certificates  are  widely  considered  to 
be  better  proof  of  identity  than  a  re¬ 
usable  password. 

EasCorp.,  as  it’s  known,  spends  about 
$50  per  user  on  the  Keon  certificate  sys- 


Key  features 

What's  new  in  RSA  Security's  Keon 

5.5  public-key  infrastructure  suite: 

•  Support  for  digital  certificates  from 
Baltimore,  IBM  and  Netscape. 

•  Support  for  the  banking  industry's  Identrust 
hierarchical  trust  model. 

•  More  automated  user  registration  process 
based  on  Windows  NT  LAN  or  SecurlD 
authentication. 

tern,  and  plans  to  use  its  system  for  trans¬ 
ferring  funds  in  the  future  as  well  as  pro¬ 
viding  secure  Web  access,  Smith  says. 
Using  a  one-time  password  sent  through 
old-fashioned  registered  mail,  users  can 
then  register  online  to  download  certifi¬ 
cates  from  EasCorp.’s  Keon  server. 

RSA  says  Keon  5-5  expands  the 
options  for  certificate  registration  by  let¬ 


ting  users  authenticate  to  an  NT  LAN. 

“This  allows  customers  to  take 
advantage  of  existing  authentication 
environments,”  Liberty7  says. 

Once  authentication  is  completed, 
the  Keon  5.5  server  could  automate 
the  download  of  the  digital  certificate 
to  the  user. 

RSA  says  it  makes  sure  a  single  cer¬ 
tificate  will  work  with  various  applica¬ 
tions,  such  as  secure  e-mail. This  week, 
RSA  adds  Web  access  and  control  prod¬ 
ucts  from  Netegrity,  enCommerce, 
Internet  Dynamics  and  Securant  to  its 
list  of  Keon-certified  applications. 

Keon  5.5  can  cost  as  little  as  $1  per 
user  or  as  much  as  $200  per  user, 
depending  on  number  of  users,  with  500 
users  being  the  breaking  point  where 
prices  drop  substantially.  Special  starter 
packages  of  100-user  licenses  are  avail¬ 
able  for  $5,000. 

RSA:  www.rsasecurity.com 


Is  if  okay  if  l  go  ahead  and 


Everybody’s  Screaming  At  You. 
Now  Is  When  You  Could  Use  A  Tape  Drive  That  Screams  Back. 


Faster  backup  is  a  big  plus  —  and  Exabyte’s  M2  is  the  fastest.  But  it’s  when  you’re  trying  to  get  your  data 
bach  during  unplanned  downtime  that  the  M2  can,  cpiite  literally,  save  your  day.  M2  restores  data  sets 
■&f%  faster  than  DLT  8000  and  40%  faster  than  AIT-2.  Ask  your  reseller 
for  details.  Or  go  to  ytww. m2wins.com,  and  see  the  startling  side-by-side 

statistics  your^ff.  Just  don’t  be  surprised  ij  the  M2  screams  "Buy  me.  "  MB 
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Exabyte 


is  a  registered  trademark  and  M2  is  a  trademark  of  Exabyte  Corporation. 
All  other  trademarks  are  the  property  of  their  respective  owners. 


Network  World  August  28,  2000  www.nwfusion.com  15 


News 


QoS, 

continued  from  page  1 

limitations  of  managed  VPN 
services  from  ISPs.  Customers 
are  generally  required  to  keep 
all  of  their  traffic  on  a  single 
ISP’s  network,  and  quality-of- 
service  enhancements  are  not 
easily  found.  QoS  Networks, 
like  its  competitors,  is  special¬ 
izing  in  IP  quality-of-service 
offerings  for  the  masses. 

The  company,  headquar¬ 
tered  in  Dublin,  Ireland,  is 
building  an  extensive  network 
it  says  will  span  five  conti¬ 
nents  by  early  next  year. 

QoS  Networks  is  not  laying 
its  own  fiber  like  CoreExpress, 
but  instead  is  buying  network 
capacity  from  companies  such 
as  Global  Crossing,  says  Jim 
Valentine,  president  and  CEO 
of  the  company.  The  service 
provider  is  building  data  cen¬ 
ters,  which  it  calls  Q-links, 
around  the  world  (see 
graphic).  Each  Q-link  houses 
about  six  Lucent  Access  Point 
1000  routers,  TNT  voice-over- 
IP  switches  and  proprietary 
QoS  Networks  software,  all 
connected  to  a  Gigabit  Ether¬ 
net  network. 

QoS  Networks  has  also 
developed  a  Web  interface  for 
customers  called  Q-access, 
which  lets  users  change  band¬ 
width  and  prioritization 
schemes  on  the  fly  from  their 
desktop. 

But  the  Access  Point  1000 
routers  are  the  heart  and  soul 
of  the  service. The  routers  sup¬ 
port  multiple  quality-of-ser- 
vice  technologies,  such  as 
class-based  queuing  (CBQ) 
and  Differentiated  Services 
(Diff-Serv).  CBQ  lets  cus¬ 
tomers  delegate  how  much 
bandwidth  is  dedicated  to 


Net  Know-It-All 


For  the  answer  la  this  week's  question  and 
more  net  trivia,  visit  Network  World 
Fusion  and  enter  2349  in  the  Search  box 


I  This  week's  question: 

. 

Ken  Thompson  and 
Dennis  Ritchie  are 
considered  the  fathers 
of  what  technology? 


each  VPN  site  and  how  to 
divvy  up  that  bandwidth  for 
specific  applications,  depart¬ 
ments  or  users.  Diff-Serv,  an 
IETF  specification,  tags  IP 
packets  with  various  levels  of 
prioritization.  For  instance,  if  a 


user  is  sending  voice  over  a 
VPN,  that  traffic  can  always  be 
given  top  priority,  while  HTTP 
traffic  gets  pushed  to  the  bot¬ 
tom  of  the  queue. 

QoS  Networks  says  these 
features  will  be  guaranteed  in 
service-level  agreements 
(SLA),  although  specific  met¬ 
rics  were  not  available  at  press 
time. 

Because  these  services  are 
just  emerging,  users  have  to  be 
cautious  when  inking  SLAs,  says 
Joanna  Makris,  an  analyst  at  The 
Yankee  Group  in  Boston. 
“Potential  customers  should 
ask  for  SLAs  that  not  only  cover 
uptime  and  latency,  but  also 
mean  time  to  repair  and  guar¬ 
anteed  response  time  for  ser¬ 
vice  requests,”  she  says.  “Many 


Intel, 

continued  from  page  10 

working  involves  the  ex¬ 
change  of  information  or 
computing  resources  among 
multiple  computers  connect¬ 
ed  over  a  network.  In  such  an 
environment,  desktop  PCs, 
servers  and  notebooks 
become  “peers”  that  share 
their  resources  —  such  as 
processing  power  or  storage 
space  —  with  other  PCs  on 
the  network. 

Businesses  could  save  mil¬ 
lions  of  dollars  each  year  by 
taking  advantage  of  unused 
processing  power  and  storage 
resources  residing  in  other 


SLAs  aren’t  worth  the  paper 
they  are  printed  on,  so  users 
should  push  for  as  much  granu¬ 
larity  in  their  guarantees  as 
possible.” 

While  the  idea  of  buying  IP 
services  that  offer  users  an 


extra  level  of  control  may  be 
nirvana  for  some,  overall 
demand  is  hard  to  predict. 
“There  is  one  big  question 
that  hasn’t  been  answered 
about  value-added  VPN  ser¬ 
vices,  and  that’s  pricing,”  says 
David  Passmore,  research 
director  at  The  Burton  Group, 
a  Sterling,  Va.,  consulting  firm. 

It’s  great  to  offer  more  pre¬ 
dictability,  but  if  the  services 
cost  10  times  as  much  as  man¬ 
aged  VPN  offerings,  then  the 
services  and  companies  will 
fail,  he  says. 

“We  will  not  be  a  price 
leader,”  says  QoS  Networks’ 
Valentine.  “But  because  of  our 
network  architecture,  we  are 
reasonably  priced.” 

One  selling  point  the  ser- 


computers  on  their  networks 
or  on  the  Internet,  said  Pat 
Gelsinger,  vice  president  and 
general  manager  of  Intel’s 
Desktop  Products  Group. 

At  the  same  time,  the 
model  could  lead  to  new 
types  of  services  and  applica¬ 
tions  that  are  only  now 
becoming  possible,  thanks  to 
the  proliferation  of  PCs  and 
the  Internet. 

“[P2P]  computing  could 
usher  in  the  next  generation 
of  the  Internet,  much  as  we 
saw  Mosaic  usher  in  the  last 
era,”  Gelsinger  said,  referring 
to  the  pioneering  Mosaic 
Internet  browser. 

Intel  also  announced  the 


vice  provider  is  pushing  is  that 
it’s  not  requiring  long-term 
contracts.  In  fact,  QoS  Net¬ 
works  is  encouraging  cus¬ 
tomers  to  sign  only  monthly 
contracts.  “Our  view  is,  if  you 


use  it,”  Valentine  says. 

Although  QoS  Networks  pri¬ 
marily  plans  to  team  with  ser¬ 
vice  providers  to  sell  its  offer¬ 
ings,  large  businesses  can  also 
buy  services  directly.  The  start¬ 
up  has  already  drummed  up 
$100  million  in  funding  from 
Warburg  Pincus  &  Co.,  Soros 
Private  Equity  Partners,  Global 
Crossing,  Signal  Lake  Venture 
Fund,  Lucent  and  GE  Capital. 

QoS  Networks  will  officially 
launch  at  NetWorld+Interop 
in  Atlanta  next  month,  but 
Valentine  says  the  firm  will 
have  paying  customers  on  its 
network  beginning  Sept.  1 .  LJ 

Get  more  info  online. 
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formation  of  an  industry 
working  group  focused  on 
P2P  networking  that  will  hold 
its  first  meeting  Sept.  26  in 
Santa  Clara.  Members  include 
Intel,  IBM,  Hewlett-Packard 
and  several  start-ups,  includ¬ 
ing  Groove  Networks  and 
Entropia.  Intel  is  in  discus¬ 
sions  with  Microsoft  about 
joining  the  group,  Gelsinger 
said. 

Gelsinger  boasted  that 
Intel  has  used  P2P  computing 
within  the  company  for  the 
past  eight  years,  allowing 
its  engineers  around  the 
world  to  share  processing 
power  to  run  chip  design 
applications.  3 
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don’t  like  the  service,  don’t 


Start-up  launches  global  IP  network 

QoS  Networks  will  have  international  network  facilities  in  place  when  its  first  services  are  available 
next  month.  .  . 
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1  Cities  where 
QoS  Networks 
has  data  centers. 


Cities  where  QoS  Networks 
will  have  data  centers  by 
the  end  of  the  fourth  quarter. 


Cities  planned 
for  the  first  half 
of  2001. 
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MISSION 

Implement  a  secure 
e-business. 


Things  change.  There’s  a  golden  opportunity  to  grow  the 
business  globally.  Produce  a  new  product  line  by  collaborating 
with  outside  suppliers,  partners  and  key  customers. 
Objectives:  Attract  new  customers.  Corner  the  market. 
Increase  revenues.  Provide  sensitive  data  while  keeping  it 
secure.  The  solution  is  Tivoli®  SecureWay®-  to  let  the  right 
outsiders  share  applications  and  access  critical  corporate 
information.  Create  a  true  e-business  and  keep  it  safe  and 
secure.  With  quick  and  affordable  implementation.  That’s 
why  leading  businesses  choose  the 
award-winning  Tivoli  SecureWay 
solution  from  Tivoli  Systems 
Inc.,  an  IBM  company.  Mission 
accomplished.  1-888-TIV0LI-1 


www.tivoli.com/security 


Manage.  Anything.  Anywhere." 


BUILDING  NETWORKS 


THAT  MANAGERS  SWEAR  BY, 


Take  a  close  look  at  any  network  that  connects  to  the  Internet. 
If  it  has  anything  to  do  with  switching,  Ethernet  and  IP,  there’s  a  very 
good  chance  it’s 


powered  by  Extreme  Networks 


The  reason  is  quite  simple.  Only  Extreme  supplies  metro  area 
networks,  service  providers,  co-location  and  hosting  facilities,  multi¬ 
tenant  buildings,  e-businesses  and  big  enterprises  with  the  switched 
broadband  services  other  companies  promise  but  can’t  deliver. 


Provisioned  services  like  bandwidth  by  the  slice,  full-featured  BGP4 
and  scaled  OSPF,  server  load  balancing,  web  cache  redirection,  fixed 
latency  for  voice  and  video  traffic,  WDM  and  Policy-Based  Quality  of 
Service  -  at  wire  speed,  on  any  port,  at  any  time. 


So  if  you’re  looking  for  a  reliable  broadband  network  infrastructure 
that  can  scale  your  business  into  the  future  without  scaling  cost 
and  complexity,  call  us  or  visit  our  Web  site  today. 


not  only  do  wonders  for  your  network,  it’ll  clean  up  your 

vocabulary  as  well. 


e  xtre  menetworks.c  om/go/nw  1 .  ht  m 

888-257-3000,  ext.  3131  (U  S.) 
+  1  408-579-3131  (Outside  U  S.) 
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Infrastructure 

m  TCP/IP,  LA N/WA N  Switches,  Pouters,  Hubs,  Access  Devices, 

Clients,  Servers,  Operating  Systems,  VPIVs,  Networked  Storage 

Enterasys  tries  to  fill  VPN  product  gap 

Cabletron  spinoff  buys  start-up  Indus  River  to  bolster  its  VPN  product  portfolio. 


Briefs 


Xiotech  introduced  software  last 
week  that  lets  network  managers 
carve  up  Magnitude  storage  arrays 
and  assign  the  virtual  partitions  to 
different  host  systems  located 
across  a  company's  network.  It 
also  lets  data  be  replicated  from 
one  disk  volume  to  another.  The 
REDI  SAN  Links  software  works 
with  Windows  NT,  Unix,  NetWare, 
Linux  or  Macintosh  hosts.  It  lets 
storage  be  combined  into  a  com¬ 
mon  pool  regardless  of  physical 
location,  and  shared  among  the 
servers  across  the  network.  The 
REDI  SAN  Links  Replicator  lets  net¬ 
work  managers  copy  data  from 
one  Magnitude  storage  array  to 
another  by  volume  or  entire  array. 
REDI  SAN  Links  and  REDI  SAN 
Links  Replicator  cost  $20,000  and 
$40,000,  respectively  per 
Magnitude  source  array. 

Xiotech:  www.xiotech.com 

LSI  Logic  introduced  a  Fibre 
Channel  storage  array  for  work¬ 
group  and  departmental  networks 
last  week.  Dubbed  the  MetaStor 
E2400,  the  array  has  dual  active 
controllers,  redundant  power  sup¬ 
plies,  cooling  fans  and  redundant 
1/0  paths  for  fault  tolerance.  All 
components  are  hot-swappable. 
The  E2400  has  a  capacity  ranging 
from  36G  bytes  to  more  than  two 
terabytes.  The  MetaStor  E2400 
ranges  from  $18,000  to  $170,000. 

LSI  Logic:  www.metastor.com 

Foundry  Networks  last  week 
said  its  Serverlron  Internet  traf¬ 
fic  and  content-management 
switches  received  Open  Plat¬ 
form  for  Security  (0PSEC)  certi¬ 
fication  from  Check  Point  Soft¬ 
ware  Technologies.  Check  Point 
certified  that  Foundry's  Server- 
IronXL  switches  provide  load 
balancing  and  failover  of  all 
active  sessions,  including  VPN-1 
sessions,  for  Check  Point's 
VPN-1/FireWall-1  4.1  products. 
OPSEC  is  an  industrywide  multi¬ 
vendor  security  framework. 


BY  PHIL  HOCHMUTH 

ANDOVER,  MASS.  —  Cabletron  spin¬ 
off  Enterasys  Networks  now  has  some¬ 
thing  substantial  to  offer  enterprise  VPN 
customers,  thanks  to  its  purchase  of 
start-up  Indus  River  Networks  last 
week. 

Enterasys  and  Indus  River  executives 
say  the  $170  million  stock  deal  will  let 
the  company  add  advanced  site-to-site 
VPN  capabilities  to  its  line  of  enterprise 
LAN  and  WAN  equipment. 

“Indus  River  has  been  working  for 
the  last  several  years  building  up  an 
extremely  scalable  [VPN]  software  solu¬ 
tion  along  with  world-class  VPN  prod¬ 
ucts,”  says  John  Rose,  Enterasys’  chief 
technology  officer.  “We  re  acquiring  this 
technology  as  a  core  to  our  business.” 

Enterasys  has  products  with  limited 
site-to-site  VPN  capabilities.  Its  Smart¬ 
Switch  Router  600  and  SSR  700  products 
have  VPN  features,  but  are  based  on 
older  VPN  technology  acquired  when 


BY  JASON  MESERVE 

MOUNTAIN  VIEW,  CALIF.  —  Sky- 
Stream  Networks  is  expanding  from  its 
hardware  roots  with  the  introduction  of 
zBand,  a  software  product  that  lets  ser¬ 
vice  providers  and  companies  offer 
branded  streaming  media  and  other  con¬ 
tent  to  end  users. 


www.nwfusion.com 


REACHING 

FOR  THE 

SKYSTREAM 

Are  corporate  networks  ready  for 
complex  broadcast  networks? 
SkyStream  thinks  so.  Check  out  the 
company's  white  paper  on  the 
emergence  of  broadcast  networks. 


Cabletron  bought  Digital  Equipment’s 
network  business,  Rose  says. 

“They  have  good,  basic  site-to-site 
VPN  technology,”  Rose  says  of  the  cur¬ 
rent  Enterasys  VPN-enabled  products, 
“but  the  technology  is  about  5  or  6 


years  old.” 

Enterasys  will  work  with  customers 
to  determine  if  an  upgrade  to  Indus 
River-based  products  is  necessary. 

Founded  in  1996,  Indus  River  received 
praise  for  its  RiverWorks  line  of  VPN 


Service  providers  and  firms  can 
already  deliver  rich  media  over  their  net¬ 
works,  but  the  end  user  may  not  be 
aware  of  their  brand.  With  zBand,  organi¬ 
zations  can  frame  the  content  being 
delivered  into  a  customized  guide, 
which  is  an  XML-based  viewing  window 
that  runs  in  Microsoft  Internet  Explorer. 
The  guide  can  contain  service  provider 
or  corporate  branding  and  can  serve  up 
HTML,  streaming  media  and  other  data 
types.  ZBand  is  also  designed  to  improve 
the  viewing  experience,  especially  for 
people  with  high-speed  connections 
(T-l,  cable  and  DSL)  to  the  Internet,  by 
providing  higher-quality  content. 

The  software  system  is  designed  to 
work  over  any  network  type,  including 
satellite,  broadband  and  broadcast  net¬ 
works.  At  the  origin  point,  the  zBand 
server  collects  content  from  the  Web, 
caches  it,  then  pushes  it  out  to  the  zBand 
client  near  or  at  the  edge  of  the  net¬ 
work.  The  client  can  reside  at  a  service 
provider’s  point  of  presence  (POP)  or  in 
a  remote  office,  and  is  used  to  feed  data 
into  an  Apache  Web  server.  Residential 


hardware  and  software.  In  addition  to  its 
technology,  the  Acton,  Mass.,  start-up 
brings  marketing  and  technology  rela¬ 
tionships  with  WorldCom,  UUNET  and 
GRIC,  an  IP  telephony  service  provider, 
all  of  which  have  boosted  the  company’s 


reputation  in  the  VPN  industry. 

Although  Indus  River  has  been  suc¬ 
cessful  on  its  own,  co-founder  and  CEO 
Per  Suneby  says  his  company’s  technol¬ 
ogy  will  reach  more  users  as  a  result  of 
See  Enterasys,  page  22 


users  can  pull  down  the  client  to  a  PC  or 
set-top  box  so  content  can  be  down¬ 
loaded  directly  to  where  it  is  being 
viewed,  says  Ren  Finley,  SkyStream’s 
zBand  product  manager. 

“We’re  delivering  content  right  to  the 
IE  cache  on  the  local  hard  drive,”  Finley 
says.  “This  way  the  user  gets  the  best 
experience  because  they’re  pulling  from 
their  hard  drive  and  not  the  network.” 

SkyStream  is  looking  for  ways  that  ser¬ 
vice  providers  can  brand  and  possibly 
increase  revenues  on  the  services  they 
sell.  The  company  does  not  intend  to 
build  a  content  delivery  network  to 
compete  with  the  likes  of  Akamai;  rather 
it  looks  to  partner  and  sell  zBand  to 
those  types  of  companies,  Finley  says. 

“SkyStream  is  coming  at  the  content 
delivery  space  from  a  unique  angle  by 
allowing  the  service  provider’s  content 
delivery  system  to  be  branded,”  says  Jim 
Penhune,  an  analyst  with  The  Yankee 
Group  in  Boston. 

No  matter  what  type  of  network  is 
being  used  for  content  delivery,  it  must 

See  SkyStream,  page  22 


SkyStream  product  helps  brand  streaming  media 


"Competing  in  the  enterprise 
networking  business  is  hart!  for  a 
small  start-up  like  [Indus  River].  It 
was  time  for  us  to  scale  up  ...  and 
Enterasys  gives  us  that  scale." 

Per  Suneby,  CEO,  Indus  River  Networks 
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It’s  time  to  focus  less  on 


THE  DOT 


and  more  on 


THE  COMMERCE, 


Dell  ”  offers  a  complete  line  of  InteP-based  systems.  Expand  your  E-Business  with  robust  Dell  PowerEdge'"  servers  based  on  the  Intel  Pentium*  III  Xeon™  processor. 


'Availability  varies.  Intel,  the  Intel  logo,  and  Pentium  are  registered  trademarks,  and  Pentium  III  Xeon  is  a  trademark  of  Intel  Corporation.  Dell,  PowerEdge,  and  the  Dell  logo  are  registered  trademarks  of  Dell  Computer  Corporation. 
Dell  E  Com  and  How  E  Works  are  trademarks  of  Dell  Computer  Corporation.  ©2000  Dell  Computer  Corporation.  All  Rights  Reserved. 


our  compiete  offering  of  internet  products  &  service* 


Dell  E  Works 


expert  services 

strategic  partnerships 
infrastructure  products 
flexible  financing 

internet  services 

high  availability  services 


With  all  the  talk  about  the  dot  these  days, 
it  seems  many  have  taken  their  eyes  off  the 
real  miracle  of  the  Internet  —  profits. 

It  takes  more  than  just  technology  to  build  a 
successful  business  (dlthough,  we’re  pretty  proud 
of  what  we  have  to  offer  in  that  department). 

It  takes  partnerships  with  some  of  the  most 
successful  and  viable  E-Businesses  out  there 
—  like  Intel®,  Microsoft®,  and  Red  Hat®  Linux™. 

It  takes  a  commitment  to  provide  your  company 
with  the  tools  it  needs  to  grow,  such  as  open 
standard  Dell ™  Power  Edge ™  servers,  featuring 
Intel  Pentium ®  III  Xeon ™  processors  and 
expandable  PowerVault ™  storage  systems. 


It  takes  service  and  support  that  is  available 
to  you  by  phone,  and  online  24/7.  And,  if  we 
can't  solve  your  problem  over  the  phone  or 
online,  we’re  prepared  to  send  a  technician 
to  your  business,  for  the  times  you  may  need 
on-site  service 


Finally,  it  takes  financing  options  that  are 
as  flexible  and  adaptable  as  the  systems  and 
servers  we  sell. 

What  do  you  call  this  kind  of  offering? 

Dell  E  Works  —  the  total  online  solution  that 
delivers  the  true  miracle  of  the  Internet  —  profits. 
Just  ask  Monster.com.  Part  of  their  E  Works 
solution  includes  Dell  Power  Edge  servers, 
featuring  powerful  Intel  Pentium  III  Xeon 
processors  to  fuel  their  business. 

Call  us,  or  go  online  to  find  out  about 
Dell  E  Works  —  your  complete  Internet 
product  and  service  provider. 


D0LLO 


800.847.4053 


WWW.DELL.COM 


infrastructure 


Wired  Windows  .  Dave  Kearns 

Directory  services:  Let’s  not  reinvent  the  wheel 


In  my  last  column  (www.nw 
fusion.com,  DocFinder:  9622),  I 
was  bemoaning  the  fact  that  direc¬ 
tory  services  was  a  little-understood 
technology  —  even  by  those  who 
should  understand,  such  as  the  ven¬ 
dors  from  which  we  buy  our  soft¬ 
ware.  One  segment  I  particularly 
noted  was  the  security  software 
industry.  The  severity  of  the  problem 
was  brought  home  to  me  this  week. 

I  got  a  note  from  a  PR  person  ask¬ 
ing  me  to  check  out  the  new  offerings 
from  Appgate  (www.appgate.com),  a 
2-year-old  Swedish  security  company 
looking  to  break  into  the  U.S.  market. 
The  company,  and  its  product  of  the 
same  name,  is  described  as: 

“Appgate,  the  first  security  solution 
that  works  beyond  the  firewall,  is  dra¬ 
matically  enhancing  the  way  in 
which  information  and  applications 
are  obtained.  They  implement  access 
controls  that  only  allow  specific  indi¬ 


viduals  access  to  designated  applica¬ 
tions.  This  premier  solution  solves  a 
key  security  problem  —  dynamic 
application  access  —  yet  has  the  flex¬ 
ibility  to  dovetail  with  existing  secu¬ 
rity  components  and  can  scale  as  the 
enterprise’s  needs  expand.” 

What  happens  is  this:  Using  the 
Appgate  client,  a  person  accesses  the 
Appgate  server,  gets  authenticated 
and  then  gets  authorized  to  use  appli¬ 
cations  based  on  a  rules  engine.  Go  to 
www.appgate.com/products/how_it 
_works/  and  look  at  the  demo;  it 
shouldn’t  take  more  than  2  or  3  min¬ 
utes.  I’ll  wait. 

Back  so  soon?  Not  exactly  rocket 
science,  is  it?  So  why  don’t  the  secu¬ 
rity  folks  understand  that  this  is  a 
function  of  directory  services? 

Every  directory  service  on  the  mar¬ 
ket  today  can  do  what  this  “security” 
product  can  do  and  has  been  able  to 
for  quite  some  time.  Of  course  direc¬ 


tories  can  do  even  more  in  terms  of 
identity  services,  policy-based  man¬ 
agement,  authorization  and  authenti¬ 
cation,  and  on  and  on.  For  those  of 
you  running  NetWare  3  with 
eDirectory  or  Windows  2000  with 
Active  Directory  —  you’ve  already 
got  almost  all  of  the  functionality  of 
Appgate,  right  out  of  the  box.  No 
additional  spending  required. 

And  “additional  spending”  is  most 
likely  a  big  part  of  Appgate  because 
nowhere  on  the  Web  site  can  I  find 
any  indication  of  what  it  might  cost. 
Sounds  like  one  of  those  “if  you  have 
to  ask  the  price,  you  can’t  afford  it” 
applications. 

Evidently,  the  trend  in  security 
applications  is  to  reinvent  the  wheel, 
or  in  this  case,  to  reinvent  the  direc¬ 
tory  service. 

Kearns,  a  former  network  admin¬ 
istrator,  is  a  freelance  writer  and 


consultant  in  Austin,  Texas.  He  can 
be  reached  at  wired@vquill.com. 


Tip 


of  The 

Week 


There  was  a  time, 
when  a  patch  was- 
released  and  all  you  had  to 
do  was  run  a  setup  program  to  install  it. 
But  times  have  changed,  patches  are 
now  part  of  service  packs,  and  you 
need  to  plan  a  deployment  strategy  to 
install  them.  Check  out  www.micro 
soft.com/windows2000/li  bra  ry/plan 
ning/incremental/splguide.asp  to  help 
plan  your  deployment  of  Windows  2000 
Service  Pack  1. 


Enterasys, 

continued  from  page  1 9 

the  Enterasys  deal. 

“Competing  in  the  enterprise  net¬ 
working  business  is  hard  for  a  small 
start-up  like  [Indus  River] ,”  Suneby  says, 
adding  that  the  customer  base  and  sales 
channels  Enterasys  has  will  be  key  in 
boosting  Indus  River’s  products.  “It  was 
time  for  us  to  scale  up  . . .  and  Enterasys 
gives  us  that  scale.” 

Enterasys  will  start  shipping  Indus 
River  VPN  products  immediately  under 
its  own  brand  name,  and  plans  to  intro¬ 
duce  new  products  based  on  the 
acquired  technology  in  the  next  quarter. 


Enterasys  gear  with  integrated  Indus 
River  technology  will  ship  by  the  begin¬ 
ning  of  next  year,  and  will  include  the 
entire  product  line  of  Enterasys’ 
SmartSwitch  LAN  switches,  SSRs  and 
RoamAbout  wireless  LAN  access  points. 

The  Indus  River  acquisition  is  the 
first  major  business  move  Enterasys  has 
made  since  being  broken  off  from 
Cabletron  in  February.  Cabletron  acts  as 
a  holding  company  for  Enterasys  and 
provided  the  stock  used  to  make  the 
Indus  River  deal,  which  is  expected  to 
close  in  October.  Enterasys  is  planning  a 
November  IPO. 

The  worldwide  market  for  VPN  equip¬ 
ment  and  software  will  more  than  triple 


from  $1.2  billion  this  year  to  $3.7  billion 
in  2004,  according  to  Infonetics  Research 
in  San  Jose.  In  a  recent  Infonetics  survey 
of  225  users  planning  to  deploy  VPN 
technology,  97%  said  they  will  implement 
a  site-to-site  VPN  by  2002. 

With  the  VPN  boom  already  under 
way,  however,  some  analysts  see  Enter¬ 
asys  as  still  being  a  step  behind  its 
competitors. 

“This  deal  gives  [Enterasys]  a  prod¬ 
uct  in  a  space  where  they  really  needed 
it,”  says  Joel  Conover,  senior  analyst 
with  Current  Analysis.  However, 
“they’re  definitely  getting  into  the 
[VPN]  game  a  little  late,”  he  adds,  and 
the  deal  is  “somewhat  of  a  reflexive 


move  to  protect  existing  customers 
from  going  with  competitors’  VPN 
equipment.” 

To  make  a  difference  in  the  VPN  mar¬ 
ket,  Enterasys  must  make  itself  more  vis¬ 
ible  as  a  maker  of  VPN  concentrator 
equipment,  Conover  says. The  company 
must  also  prove  it  can  efficiently  inte¬ 
grate  Indus  River  VPN  software  with  its 
network  equipment  lines,  he  says.  3 


SkyStream, 

continued  from  page  1 9 

be  IP  multicast-enabled.  Besides  stream¬ 
ing  and  rich-media  delivery,  enterprise 
customers  can  use  zBand  to  deliver 
large  files  simultaneously  to  users 
throughout  the  network.  This  is  partic¬ 
ularly  useful  for  time-sensitive  informa¬ 
tion  such  as  inventory  levels  and  stock 
quotes.  The  software  can  also  be  used 
to  build  vertical  portals  by  collecting 
related  information,  such  as  news  or 
sports  information,  at  the  server  and 
pushing  it  to  the  client  level. 

The  ZBand  server  runs  on  Windows 
NT,  while  the  client  sits  on  an  NT  or 
Linux  machine.  For  those  wanting  to  do 
caching  in  a  remote  POP  or  office, 
Apache  is  also  required.  Pricing  for  the 
base  configuration  of  zBand  starts 
around  $100,000. 

SkyStream:  www.skystream.com 


How  zBand  works 

In  this  example,  SkyStream's  zBand  product  serves  up  rich  media  in  a  content  delivery  network. 


O  Data  is  pulled  from  various 
sources  into  the  central 
zBand  server. 

Web  sites 


©  The  content  is  pushed 
to  remote  servers  that 
run  the  zBand  client  and 
Apache  caching  software. 


Streaming 

videos 


Intranet  files 


MP3 

audio 


Rich  Web 
sites 


Fetch 


Content  delivery 
network 
origination  site 


zBand  server 


Branded 

guide 


Content 


Service  providers 


^  software 

zBand  proxy  client 


Cache  server 
running  Apache 


To  consumers 


©  Content  can  also  be 
branded  by  delivering 
it  within  a  customized 
viewing  guide  directly 
to  the  end  user. 


SOURCE:  SKYSTREAM  NETWORKS.  MOUNTAIN  VIEW.  CALIF 
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Are  VPN's  something  your  ISP  has  promised? 


Are  VPN's  something  your  ISP  has  implemented? 


Virtual  Private  Networks  are  still  a  rumor  to  some.  But  UUsecuresm  VPN's  offer  standard  space,  cost-effective  and  complete  solutions  now. 
With  24/7  monitoring.  Firewall  support.  Advanced  security.  A  fully-managed,  end-to-end  global  network.  Guaranteed  performance  and 
availability*  And  the  experience  to  deliver  VPN's  that  are  everything  you've  heard.  Call  1-888-886-3844.  Code:  Perfect.  Or  visit  www.info.uu.net. 


The  Business  Side  Of  The  Internet T 


UUNET 

A  WorldCom  Company 


Canada:  1  888  242  0653  ©2000  UUNET  Technologies,  Inc.,  a  subsidiary  of  WorldCom,  Inc.  All  rights  reserved.  The  UUNET  logo  is  a  trademark.  *Go  to  www.uu.net/sla  for  more  information. 


Infrastructure  Special  Focus 


Cisco,  IBM  report  progress 

in  network  union 


BY  JIM  DUFFY  AND  MARC  SONGINI 

Almost  nine  months  after  gaining  U.S.  Depart¬ 
ment  of  Justice  clearance,  the  $2  billion  net¬ 
work  and  service  alliance  between  Cisco  and 
IBM  is  benefiting  both  participants.  Cisco  says 
revenue  gained  from  sales  of  switches  and 
routers  via  the  alliance  has  exceeded  expecta¬ 
tions  threefold.  The  competitive  barriers  that  once 
existed  between  Cisco  and  IBM  have  been  broken 
down  such  that  IBM’s  Network  Hardware  Division 
(NHD)  customers  now  have  “comfortable” 
access  to  Cisco  technology. 

“There  is  now  an  unleashing  of  the 
pent-up  demand  between  IBM  Global 
Services  and  the  Cisco  field  force,”  says 
Michael  Kay,  Cisco’s  marketing  manager  for 
the  alliance.  Cisco  estimates  that  50%  to 
60%  of  the  NHD  installed  base  in  the  U.S. 
has  completed  the  migration  to  Cisco. 

IBM  reports  its  massive  Global  Services 
integration  division  is  also  now  free  to 
address  the  pent-up  demand  by  selling 
and  servicing  Cisco  routers  and  switches, 
and  helping  the  NHD  installed  base 
migrate  off  of  the  IBM  hardware.  Among 
its  major  service  packages  is  an 
SNA/Token-Ring-to-IP/Ethernet  migration 
implementation. 

“We  have  exceeded  our  business  expec¬ 
tations,”  saysTowney  Kennard,  vice  presi¬ 
dent  for  strategic  alliances  at  IBM  Global 
Services.  “We  have  embarked  on  more  than 
120  networking  and  e-business  engage¬ 
ments  worldwide  since  this  partnership 
was  approved  by  the  Justice  Department 
in  December.  Our  customers  have  been 
very  receptive  to  our  alliance.” 

One  user  notes  that  IBM’s  Global  Serv¬ 
ices  division  is  selling  Cisco  products  “like 
crazy.” 

“In  the  end,  the  customers  will  be  bet¬ 
ter  off,”  says  the  user,  who  operates  a 
large  financial  services  network  and 
requested  anonymity.  “As  time  goes  on, 
and  Cisco  takes  more  and  more  of  the 
channel  connections  with  their  [Channel 
Interface  Processor],  the  folks  who  do  not 
move  off  their  3745s  will  receive  less  sup¬ 
port,  no  upgrades,  and  will  have  no  ability  to  sell 
their  old  [front-end  processors],  since  no  one  will 
want  them.” 

Cisco  and  IBM  announced  their  arrangement  in 
September  1 999.  IBM  sold  its  NHD  routing  and 
switching  technology  to  Cisco  and  agreed  to  migrate 
NHD  accounts  to  Cisco.  IBM  also  agreed  to  service 
and  support  Cisco  accounts,  including  those  migrat¬ 
ing  from  NHD  products  to  Cisco  gear. 

Cisco,  meanwhile,  agreed  to  purchase  parts  and 
components  from  IBM  for  five  years  in  addition  to 


ALLIANCE  REVIEW 

Heuen ne  is  three  times 
mrhat  Cisco  expected; 

IB  Ml  selling,  servicing  Cisco 
gear  'like  crazy.' 


acquiring  the  NHD  routing  and  switching  technol¬ 
ogy.  To  date,  Cisco  has  not  made  use  of  the  NHD 
routing  and  switching  technology,  Kay  says. 

The  alliance  with  Cisco  was  an  admission  by  IBM 
that  it  could  not  compete  with  Cisco  in  company 
networks  beyond  IBM’s  traditional  SNA  and  Token- 
Ring  installed  base. 

“I  think  it  gets  an  8.5  [score],”  says  Tom  Nolle, 
president  of  CIMI,  a  Voorhees,  N.J.,  consultancy. 
“It’s  certainly  served  Cisco’s  purpose  of  gaining  an 
entry  into  IBM  accounts,  and  it  served  IBM’s  pur¬ 


pose  of  getting  them  out  of  a  business  they  weren’t 
winning  in.” 

One  big  win  for  Cisco  is  the  United  Parcel  Service 
account.  At  last  count,  UPS  was  using  2,000  of  IBM’s 
2210  routers  in  its  global  network.  However,  UPS  will 
be  replacing  those  with  Cisco’s  WAN-enabled  Cata¬ 
lyst  6509  switches  once  the  2210s  have  exhausted 
their  useful  life,  a  UPS  spokeswoman  says. 

UPS  will  replace  75  to  100  of  the  routers  with 
Cisco  switches  by  year-end,  the  spokeswoman  says. 

“We’re  trying  to  get  the  most  bang  out  of  what  we 
still  have,”  she  says.  “But  as  new  deploy¬ 
ments  are  made,  Cisco  routers  are  replac¬ 
ing  IBM  on  an  as-need-to-be-replaced  basis.” 

There  remains,  however,  some  healthy 
fight  between  Cisco  and  IBM,  despite  the 
alliance.  IBM  continues  to  view  Cisco  as  a 
competitor  when  it  comes  to  legacy 
SNA/Token-Ring  equipment  —  LAN 
switches,  hubs  and  adapters,  and  main¬ 
frame  to  network  communications  prod¬ 
ucts,  such  as  front-end  processors  (FEP) 
and  IBM  Open  Systems  Adapter  (OSA) 
Express  cards. The  OSA  Express  card  fits 
into  the  mainframe  and  links  its  memory 
to  a  LAN  for  high-speed  communications. 

The  FEPs  and  the  OSA  Express  card 
compete  against  Cisco’s  CIP,  which  con¬ 
nects  SNA  mainframes  to  an  IP  WAN. 

During  the  next  few  years,  IBM  expects 
to  migrate  users  of  its  3746  FEP  to  the 
OSA  Express  card,  which  will  cost  less 
and  run  IP  and  other  traffic  faster  than  the 
FEP  can.  IBM  will  also  continue  to  offer 
upgrades  for  the  older  3745  FEP  indefi¬ 
nitely,  such  as  improving  the  device’s  abili¬ 
ty  to  handle  more  sessions,  which  will  let 
users  consolidate  the  number  of  FEPs  in 
their  networks. 

Though  Cisco’s  alternative  of  CIP- 
equipped  routing  is  compelling  from  a 
cost  and  technology  growth  perspective 
—  because  firms  are  adopting  IP  as  their 
corporate  network  standard  —  some 
users  are  going  to  be  keeping  their  IBM 
SNA  infrastructure  for  some  time  because 
it  will  take  years  before  IP  can  match 
SNA’s  quality-of-service  features,  says 
David  Boyes,  an  engineer  with  Dimension 
Enterprises,  a  Herndon,  Va.,  data  center  design  and 
testing  facility.  The  alliance  will  let  users  find  ways 
to  mix  IBM  legacy  gear  with  Cisco  IP  gear  and 
improve  performance  without  sacrificing  their 
investment,  he  says. 

Nonetheless,  there  are  many  areas  of  collaboration 
and  joint  development  between  Cisco  and  IBM,  Kay 
says,  carefully  guarding  details. 

IBM’s  Kennard  says  his  company  and  Cisco  are 
also  collaborating  to  address  the  ISP  and  wireless 
markets.  □ 


Out  with  the  old,  in  with  the  new 


Cisco  and  IBM  report  that  their  $2  billion  alliance  is  proceeding  ahead 
of  expectations.  Demand  for  channel-attached  routers  to  replace  IBM 
front-end  processors  is  robust . . . 


...  as  is  the  market  for  Cisco  switches  to  replace  IBM  Network  Hardware 
Division  products. 


IBM  2216  switch  Cisco  5509  switch 
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As  foretold,  the  age  of  integrated  voice  and  data  has 
come,  changing  the  lives  of  everyone  in  your  company. 

Today  Alcatel  has  realized  the  full  potential  of  network 
convergence.  Ideas  such 
as  sorted,  prioritized  e-mai 
and  voicemail  messages, 
dial  by  name,  integrated 
keyboards  and  phones 
built  into  PCs  are  now  reality. 

Imagine  providing  your  Web  customers  with  direct 
contact  to  a  service  agent  equipped  with  customized 
data.  Or  giving  your  critical  contacts  the  ability  to  reach 


you  anytime,  anywhere,  by  dialing  a  single  number. 

Alcatel's  OmniPCX  4400  does  everything  that  a 
PBX  does,  and  much  more.  With  99.999%  reliability 

and  a  distributed  client/ 
server  architecture,  OmniPCX 
4400  will  deliver  powerful 
converged  applications  to 
companies  ranging  all  the 
way  from  50  to  more  than 
50,000  people,  for  the  next  decade  and  beyond. 

Alcatel.  120,000  people.  Internet,  enterprise,  and 
telecom  solutions  around  the  globe.  www.OmniPCX.com/ads 


PROPHECY  FULFILLED: 

OmniPCX  4400  provides  unified 
messaging  with  the  power  to 
integrate  voicemail  and  e-mail. 


ARCHITECTS  OF  AN  INTERNET  WORLD 


©  2000  Alcatel. 


Call  1-888-357-5694 


WHAT  WE'VE  DONE  FOR  E-BUSINESS  IN  BRAZIL 


GIVES  NEW  MEANING  TO  THE  TERM 


UNiSYS 

We  eat,  sleep  and  drink  this  stuff. 


We've  helped  Som  Livre  become 
Brazil's  number  one  on-line  music  retailer. 
And  it  isn't  just  sambas  Som  Livre  sells: 
This  Web-based  music  mart  offers  on-line 
access  to  everything  from  rock  to  rap. 
Providing  not  only  CDs  from  around  the 
world  via  the  Internet,  but  an  on-line 
opportunity  to  let  customers  listen  before 
they  buy. 

Unisys  assisted  Som  Livre  in  creating 
its  Web  site.  And  got  it  up  and  running 
in,  well,  record  time.  We  also  developed 
a  secure  on-line  transaction  system  to 
make  every  purchase  safe  and  easy. 

And  because  Som  Livre  is  hosted 


on  highly  scalable  Unisys  e-@ction 
Enterprise  Servers  running  Microsoft® 
Windows®-based  applications,  the  music 
store  is  always  open.  And  will  continue 
to  be  as  more  and  more  customers 
visit  the  site. 

Which  is  why  Som  Livre  says  let  the 
hits  keep  on  coming,  www.unisys.com 


©2000  Unisys  Corporation  Unisys  is  a  registered  trademark  and  e-@ction  is  a  trademark  of  Unisys  Corporation. 

Microsoft  and  Windows  are  registered  trademarks  of  Microsoft  Corporation. 


Briefs 


Verizon  (formerly  Bell 
Atlantic)  has  been  ordered  by 
New  York  regulators  to  cut  busi¬ 
ness  and  residential  rates  by 
$50  million  starting  Sept.  1, 
accelerating  an  earlier  state 
Public  Service  Commission  rate- 
reduction  plan.  Originally,  the 
cut  was  to  be  $25  million,  but 
because  Verizon  sold  its  share 
in  telecom  software  and 
research  company  Bellcore, 
another  $22.7  million  in  net  pro¬ 
ceeds  is  being  passed  along  to 
customers,  as  well  as  $2.3  mil¬ 
lion  in  other  revenue. 

The  rate-reduction  scheme  is 
part  of  a  1995  agreement  be¬ 
tween  Verizon  (then  Nynex)  and 
state  regulators. 

Richard  Notebaert,  former 
chairman  of  regional  Bell  operat¬ 
ing  company  Ameritech,  has 
been  named  chairman  of 
Tellabs,  which  makes  optical 
networking,  switching  and 
broadband  access  gear. 
Notebaert  was  at  the  helm  of 
Ameritech  when  SBC  Communi¬ 
cations  bought  it  for  $62  billion  in 
1998.  He  should  find  the  job  man¬ 
ageable,  because  Tellabs  does  a 
little  less  than  $3  billion  in  busi¬ 
ness  compared  with  the  $16  bil¬ 
lion  Ameritech  did  when  it  was 
sold. 

Sprint  and  WorldCom  sepa¬ 
rately  filed  with  the  Federal 
Communications  Commission  to 
offer  two-way  fixed  wireless  ser¬ 
vices  in  more  than  100  markets. 
Sprint  plans  to  offer  Sprint 
Broadband  Direct  fixed  wireless 
services  in  45  markets,  including 
Chicago;  San  Francisco;  Green 
Bay,  Wis.;  Seattle;  Omaha,  Neb.; 
and  Denver.  Sprint's  service  is 
available  in  Tucson,  Ariz.,  and 
Phoenix.  WorldCom  plans  to 
offer  its  fixed  wireless  services 
in  60  markets,  including  Boston; 
Providence,  R.I.;  Pittsburgh;  San 
Antonio,  Texas;  and  Buffalo,  N.Y. 
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FCC  to  review  CLEC  access  to  'Pronto' 


BY  DAVID  ROHDE 

WASHINGTON,  D.C.  —  Some  competi¬ 
tive  local  exchange  carriers  are  breathing 
a  sigh  of  relief  after  the  Federal 
Communications  Commission  agreed  to 
review  the  way  SBC  Communications  is 
rolling  out  mass-market  DSL  under  the 
name  Project  Pronto. 

Earlier  this  month,  the  FCC  reopened 
its  previously  settled  rules  for  how  Bell 
companies  must  provide  switch  colloca¬ 
tion  and  local-loop  unbundling. The  FCC 
says  it’s  doing  so  because  “some  incum¬ 
bent  local  exchange  carriers”  have  de¬ 
cided  to  build  fiber  partway  between 
their  central  offices  and  residential 
neighborhoods,  and  then  offer  DSL  ser¬ 
vice  over  the  remaining  copper  loop. 

Those  plans  raise  questions  as  to 
whether  CLECs  have  room  to  put  DSL 
equipment  in  the  small  neighborhood 
remote  terminals,  according  to  the  FCC. 
The  plans  also  put  in  question  whether 
CLECs  will  be  able  to  continue  to  rent 
the  entire  copper  loop  from  the  central 
office  to  the  customer  premises  if  the 
Bell  company  no  longer  needs  it,  the 
FCC  says. 

Although  the  agency  only  cited  SBC’s 
Project  Pronto  in  a  footnote,  it  was 
widely  understood  that  the  move  is  in 


More  questions  for  Project  Pronto 

In  addition  to  whether  SBC  must 
maintain  copper  loops  all  the  way 
to  the  central  office,  the  FCC  is 
now  reconsidering: 

•  If  it  is  feasible  for  CLECs  to  install  DSLAM  in 
the  telco's  neighborhood  terminals. 

•  If  competitors  should  be  allowed  to  rent  the 
telco's  own  remote-terminal  DSLAM  ports. 

•  If  competitors  should  have  access  to  individual 
optical  wavelengths  if  dense  wavelength 
division  multiplexing  systems  are  placed  on 
the  fiber  portion  of  the  local  loop. 

•  Whether  telcos  should  provide  multiple 
ATM  classes  of  service  on  the  fiber  backhaul 
from  DSL  neighborhood  terminals  to  the 
central  office. 


reaction  to  dozens  of  pleas  by  CLECs  to 
put  Pronto  under  the  microscope.  The 
$6  billion  Project  Pronto  is  by  far  the 
largest  telephone  company  move  to 
provision  DSL  from  fiber-fed  neighbor¬ 
hood  terminals. 

The  FCC  requested  public  comment 
on  whether  incumbent  telcos  should 
tell  competitors  if  they  plan  to  retire 
central  office-to-premises  copper 


loops,  and  who  should  pay  for  loop 
maintenance  if  only  the  competitors 
want  to  use  it.  The  FCC  asked  whether 
CLECs  should  have  the  opportunity  to 
buy  the  copper  plant  from  the  telco 
before  it’s  decommissioned. 

But  the  FCC  only  asked  for  comments 
and  didn’t  tip  its  hand  as  to  how  it  would 
rule.  Tom  Nolle,  president  of  technology 
assessment  firm  CIMI  Corp.  in  Voorhees, 
N.J.,  says  CLECs  may  have  a  hard  time 
convincing  regulators  to  force  SBC  to 
worry  about  its  copper  plant  when  it’s 
building  fiber  close  to  residential  cus¬ 
tomers  —  a  goal  that  regulators  share. 

Nolle  says  he  was  recently  asked  by  a 
CLEC  whether  SBC  should  be  forced  to 
maintain  copper  everywhere  it  runs 
fiber.  “I  said  that’s  such  a  stupid,  asinine 
question  I’m  not  even  going  to  answer 
it,”  he  says. 

CLECs  praised  the  FCC  for  at  least 
considering  ways  to  maintain  copper 
side-by-side  with  fiber.  Project  Pronto’s 
architecture  currently  only  supports 
asymmetric  DSL,  and  many  users  want 
higher  speed  options  provisioned  over 
entire  copper  loops  from  a  central 
office  to  the  customer  premises,  says 
Jason  Oxman,  senior  government-affairs 
counsel  for  DSL  specialist  Covad 
Communications.  \Ji 


AT&T  Solutions  offers  managed  storage  service 


Company  teams  with  EMC  to  offer  customers  Utravailable  Data. 


BY  DENISE  PAPPALARDO 

BASKING  RIDGE,  NJ.  —  AT&T 
Solutions  is  introducing  a  managed  stor¬ 
age  service  designed  for  companies  that 
can’t  stand  to  lose  a  packet  of  data. 

AT&T  Solutions  is  teaming  with  EMC 
to  offer  large  businesses  its  Ultravailable 
Data  service,  which  is  customized  to  each 
user’s  specifications,  says  Jo-Ann  Mendles, 
a  vice  president  at  AT&T  Solutions. 

The  service  lets  customers  hand  over 
their  enterprise  and  data  storage  needs  to 
AT&T,  which  then  designs,  implements, 
monitors  and  manages  each  user’s  EMC 
Enterprise  Storage  System.  AT&T  Solu¬ 
tions  and  EMC  signed  a  three-year  mar¬ 
keting  and  revenue-sharing  deal  to  sup¬ 
port  the  service. 

Ultravailable  Data  is  for  users  who  are 
serious  about  highly  available  storage  net¬ 


works,  says  Jilani  Zeribi,  an  analyst  at  Cur¬ 
rent  Analysis,  a  consulting  firm  in  Sterling, 
Va.The  average  Ultravailable  Data  contract 
averages  tens  of  millions  of  dollars  over  a 
three-year  period,  Mendles  says. 

EMC  storage  servers  can  be  deployed 
at  a  customer’s  site,  an  AT&T  Solutions 
data  center  or  a  third-party  site  for  geo¬ 
graphic  redundancy.  Monitoring  and  serv¬ 
er  management  is  supported  using  AT&T’s 
Global  Enterprise  Management  System. 

While  storage  services  are  available 
from  other  providers,  AT&T  offers  re¬ 
sources  and  experience  that  is  not  easily 
found,  Zeribi  says.“Customers  know  that  if 
AT&T  chose  EMC,  it  has  done  due  dili¬ 
gence  and  it’s  a  reliable  service,”  he  says. 

There  is  not  a  standard  service-level 
agreement  for  all  Ultravailable  Data  cus¬ 
tomers,  Mendles  says.  Instead,  customers 
can  specify  the  types  of  guarantees  that 


are  most  important  to  their  businesses. 
Mendles  says  customers  can  expect  near 
100%  availability  guarantees  with  zero 
data  loss. 

AT&T  Solutions:  www.att.com 


STORAGE 

CLOSET 


AT&T  Solutions  is  adding  storage  to 
its  portfolio  of  services.  Find  out  what 
other  offerings  the  company  has. 
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sbc.com 


I  am  the  common, 

everyday  vocabulary  of  commerce. 

I  am  the  language  that  articulated 

the  car  you’re  driving, 

shirt  you’re  wearing, 

book  you’re  reading, 

film  you’re  watching, 

product  you’re  selling, 

paycheck  you’re  earning, 

and  swordfish  you’ll  have 

at  that  restaurant  tomorrow. 

I  am  the  linchpin  under  all 
the  world’s  commerce. 

Who  Is  the  linchpin  under  me? 

Were  investing  6  billion  dollars  in  the  most  far-reaching  deployment 
of  broadband  out  there.  Were  one  of  the  largest  network  integrators, 
and  a  provider  of  advanced,  global  eCommerce  solutions.We’re  SBC. 
The  combined  strengths  of  Ameritech,  Pacific  Bell, 

Southwestern  Bell,  Nevada  Bell,  SNET  and  now 
Sterling  Commerce. 


Copyright  v  2000  SBC’  Communications  Inc.  All  rights  reserved. 


Carriers  &  ISPs 


Eye  on  the  carriers 
David  Rohde 

Suit  shines 

LIGHT  ON  DSL 
UNCERTAINTY 

So  is  DSL  an  always-on,  dedicated, 
point-to-point,  reliable-speed, 
mass-market  broadband  technology? 

Or  is  it  a  sometimes-on,  shared,  point- 
to-multipoint,  guess-at-your-speed,  only- 
for-the-lucky  service? 

The  question  has 
been  raised  by  a  class- 
action  lawsuit  filed  on 
behalf  of  some  SBC 
Communications  cus¬ 
tomers  (www.nwfusion. 
com,  DocFinder:  9624). 
The  suit  claims  that  SBC 
limits  promised  384K 
bit/sec  download  speeds  to  128K  at  its 
convenience,  and  sometimes  simply 
kicks  users  off  the  system. 

The  multiple  accusations  are  not 
quite  as  interesting  as  SBC’s  response. 
While  it  denied  some  charges  and 
skirted  others  until  its  lawyers  give  the 
complaint  a  full  read,  SBC  admitted  it 
limits  newsgroup  users  to  128K  and  also 
limits  their  time  online  “in  order  to  pro¬ 
vide  a  more  reliable  service  for  all  our 
customers  using  the  newsgroups.” 

The  new  asterisk  on  the  service  adds 
to  the  fine  print  on  DSL  that  looms 
larger  every  day. 

By  now  most  people  realize  you  have 
to  call  to  learn  if  your  line  is  properly 
conditioned  before  you  order  DSL.  But 
now  you  sort  of  have  to  know  whether 
the  supplier  has  built  enough  band¬ 
width  back  to  its  DSL  Access  Multi¬ 
plexers  to  handle  all  the  traffic  that’s 
likely  to  hit  it.Thaf  s  troubling  when  you 
consider  that  the  Bellheads  who  run 
these  companies  always  underestimate 
online  usage. 

And  all  this  time  DSL  proponents 
have  been  telling  us  that  the  technology 
is  not  like  that  awful  cable-modem 
topology  in  which  your  next-door 
neighbor  could  be  fighting  you  for 
bandwidth.  Ha! 

This  is  not  necessarily  as  big  a  prob¬ 
lem  for  individuals  who  are  excited 
about  broadband-access  options  as  it  is 
for  network  professionals  who  are  try¬ 
ing  to  plan  remote-access  programs  for 
teleworkers,  extranets  and  trading  com¬ 
munities.  Where’s  the  certainty  in 
deploying  these  programs  if  availability 
and  performance  is  still  anyone’s  guess? 

One  thing  SBC  could  do  here  is  to 
focus  a  little  less  on  grandiose  state¬ 
ments  about  DSL  and  start  getting  a  lot 
more  specific.  We  keep  hearing  that  SBC 
is  going  to  cover  80%  of  its  territory 
with  DSL  out  of  remote  terminals  in 


three  years  under  Project  Pronto.  That’s 
akin  to  President  John  F.  Kennedy’s  1961 
statement  that  we  would  go  to  the 
moon  by  the  end  of  the  decade.  I’m  sure 
it  sounded  fabulous  when  he  said  it,  but 
it’s  not  like  you’d  rush  to  the  phone  to 
book  your  space  flight. 

SBC  likes  to  say  it’s  the  nation’s  lead¬ 


ing  DSL  provider.  Well,  SBC  has  cer¬ 
tainly  sold  more  DSL  service  than  any¬ 
one.  But  that’s  a  far  cry  from  having  all 
these  lines  installed  and  then  having 
them  work  as  advertised.  SBC  should 
leave  the  rhetorical  goals  to  presi¬ 
dents,  prime  ministers  and  popes,  and 
start  dealing  with  its  local  communi¬ 


ties  in  a  straightforward  manner  about 
DSL  availability  and  performance. 

After  all,  losing  local  accountability 
to  a  faraway  corporate  headquarters  is 
precisely  what  users  feared  when  SBC 
started  buying  rival  regional  Bells. 
Doesn’t  SBC  want  to  prove  those  fears 
groundless?  \A 


rimation 


imaginative  salahor.j. 
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The  Quantum®  Snap  Server  is  the  ideal  solution  for  upgrading  your  network  storage.  It  offers  the 
perfect  combination  of  quick  and  easy  installation  at  prices  far  below  what  you  would  pay  for  a 
traditional  NT  server.  It’s  pre-configured  to  work  in  all  major  network  environments,  which  means 
you  really  just  plug  it  in  and  turn  it  on  -  with  no  network  downtime.  In  fact,  the  Snap  Server  is  so 
hassle-free,  it  installs  in  less  than  5  minutes!  Simply  call  1-888-343-SNAP  or  visit  our  website  at 
www.snapserver.com  for  more  information. 


Quantum. 

If  it’s  important  to  you,  save  it  with  us. 


& 

MVP 


iiT^n 


& 

MVP  Winner 


□iNLIST 


©2000  Quantum  Corporation.  All  rights  reserved.  Quantum  and  the  Quantum  logo  are  trademarks  of  Quantum  Corporation,  registered  in  the  U.S.A.  and  other  countries. 
Snap  Server  is  a  trademark  of  Quantum  Corporation.  All  other  product  names  are  trademarks  of  their  respective  companies. 


Performance  Pentium-class  processor  with 

•  Quantum'  Ultra  ATA  hard  disk  drives 

•  RAID  0,1  or  5 

•  Unlimited  license,  easily  supports  100  clients 


Compatibility  Simultaneous  support  for  Windows  95/98, 
2000,  NT,  NetWare,  UNIX  and  Macintosh  networks  and 
clients  across  TCP/IP,  IPX,  NetBEUI  and  AppleTalk 


Price 

15GB -$499 
30GB  -  $799 
60GB  -  $1699 
120GB  -  $2999 


Snapi 


server 


Network  Security  Integrates 
with  NT  Domain  Controller  and 
NetWare  Bindery  servers  or  local 
user  list 


Guarantee  Unconditional 
30-day  money-back  guarantee 
on  all  Snap  Servers,  plus  3-year 
parts  &  labor 


www.snapserver.com 


Infinite  Possibilities. 

Younique  Solutions!" 

You  want  to  take  advantage  of  everything  the  B2B  world  has 
to  offer.  But  up  until  now,  your  choices  have  been  limited  to 
expensive,  complex  private  networking  or  the  unreliable  Internet. 

Who  can  solve  this  dilemma?  You  can  —  with  the  help  of  SAVVIS. 

We've  combined  the  security  of  private  networks  with  the  reach 
and  flexibility  of  the  Internet.  The  result?  You  get  a  full  range  of 
intelligent  IP  networking  solutions  that  are  as  affordable  as  the 
Internet  and  can  be  customized  to  meet  your  changing  needs. 

SAVVIS  keeps  you  covered. 

Intelligent  IP  Networking  for  Dynamic  Companies’" 


BSAVVIS 

www.savvis.net/cover 


©  2000  SAVVIS  Communications.  All  rights  reserved.  All  trademarks  property  of  their  respective  owners. 


1-866-4SAVVIS 


Enterprise 


Briefs 


Vertical  Sky,  a  subsidiary  of 
Mortice  Kern  Systems,  has  intro¬ 
duced  a  software  package 
designed  for  traditional  and  dot¬ 
com  companies  building  and 
maintaining  e-business  Web  sites. 
The  Vertical  Sky  Evolution 
Management  package  is  based 
on  BEA  Systems'  application 
server  and  features  a  collection 
of  tools  for  workflow,  version  con¬ 
trol  and  change  management.  The 
tools  in  the  package  are  based  on 
existing  technologies  but  have 
been  upgraded  to  work  better  in 
Web  environments.  Pricing  for  the 
software  varies  from  installation 
to  installation. 

Vertical  Sky:  www.vertical 
sky.com 

Computer  Associates  has 

released  eTrust  Internet  Defense, 
an  integrated  software  package 
designed  to  protect  companies 
doing  business  online  from 
attacks  and  security  breaches. 

CA's  eTrust  package  includes 
six  programs,  which  can  be 
licensed  separately  or  as  a  suite: 

•  eTrust  Firewall,  which  en¬ 
ables  companies  to  provide 
authorized  users  with  Internet/ 
intranet/extranet  access. 

•  eTrust  Content  Inspection, 
which  includes  real-time  attack 
intervention,  and  automatic  detec¬ 
tion,  blocking  and  notification  of 
all  types  of  malicious  content. 

•  eTrust  Intrusion  Detection, 
which  provides  real-time,  nonin- 
trusive  detection,  policy-based 
alerts  and  automatic  prevention. 

•  eTrust  VPN,  which  lets  com¬ 
panies  keep  their  e-business 
systems  safe  from  hackers. 

•  eTrust  Anti-virus,  which  pro¬ 
vides  real-time  protection. 

•  eTrust  Internet  Defense, 
which  allows  companies  to 
migrate  to  the  complete  soft¬ 
ware  suite  and  lets  e-businesses 
take  advantage  of  CA's  risk 
assessment  services. 

CA:  www.cai.com 


Start-up  serves  up  secure  hosted  nets 


Offering  includes  range  of  security  hardware  and  software,  such  as  firewalls  and  encryption  tools. 


BY  MICHAEL  MARTIN 

SAN  FRANCISCO  —  Start-up 
SilverTech  is  targeting  an  offering  it 
calls  a  private  Internet  engine  (PIE) 
service  at  security-conscious  vertical 
markets  that  need  to  tightly  control 
network  access  to  sensitive  applica¬ 
tions  and  information. 

El  St.  John,  SilverTech’s  founder  and 
CEO,  says  PIE  is  based  on  a  patented 
technology  that  includes  “a  combina¬ 
tion  of  hardware,  software,  configura¬ 


tion  and  design  to  keep  information 
safe  and  secure  for  those  markets  that 
require  it.” 

Ingredients  incorporated  into  PIE  in¬ 
clude  a  connection  to  an  off-internet 
backbone  through  a  provider  such  as 
PSINet,  a  server  farm  hosted  at  a  secure 
third-party  data  center,  firewalls, 
VeriSign  certificates  for  authentication, 
AppGate  for  application  access  con¬ 
trol,  156-bit  encryption  and  client-side 
software  that  allows  users  to  directly 
dial  in  to  the  data  center  through  the 


off-internet  backbone. 

Once  a  company  or  government 
agency  signs  up  with  SilverTech  and 
establishes  its  secure  server  farm  and 
applications,  end  users  who  need 
access  will  be  given  a  CD-ROM  con¬ 
taining  secure  dialer  software.  End 
users  will  install  the  dialer  onto  their 
workstations  and  connect  with  the 
browser  associated  with  the  dialer, 
rather  than  their  usual  Internet  soft¬ 
ware,  to  access  the  secure  server  farm. 

See  SilverTech,  page  34 


Sigaba  tries  to  simplify  encrypted  e-mail 

BY  JOHN  FONTANA 


HOW  IT  WORKS 

Encrypted  e-mail 

Sigaba  has  released  free  plug-in  software  that  allows  users  to  send  encrypted 
e-mail  from  popular  messaging  clients. 


iWm 


Internet 


Userl 

User  1  hits  the  "Send 
Secure"  button  on  the 
e-mail  client  to  send  a 
message  to  User  2. 
This  button  is  added  to 
the  client  via  Sigaba’s 
software  plug-in. 


Q  The  SigabaSecure  plug-in 
obtains  an  encryption  key 
and  message  identifier  from 
a  server  maintained  by 
Sigaba,  then  encrypts  the 
e-mail  without  it  leaving  the 
user's  desktop.  The  message 
is  then  sent  to  User  2. 


User  2 

The  SigabaSecure  plug-in 
on  User  2's  desktop 
intercepts  the  message, 
matches  it  with  the  message 
identifier  on  the  Sigaba 
server,  gets  the  key  for  the 
message  and  decrypts  it. 


SAN  MATEO,  CALIF.  —  Experts  have 
long  contended  that  encrypted  e-mail  can 
only  become  an  everyday  occurrence 
when  end  users  need  only  push  a  button 
to  securely  send  messages. 

Start-up  Sigaba  thinks  it  has  developed 
that  button. 

The  company  recently  unveiled 
SigabaSecure,  a  system  for  encrypting 
e-mail  with  the  click  of  a  button. 
SigabaSecure  is  based  on  software  that 
plugs  into  popular  e-mail  clients,  in¬ 
cluding  Eudora,  Lotus  Notes,  Microsoft 
Outlook,  Netscape  Messenger  and  Novell 
Group  Wise. 

Sigaba,  which  was  the  name  of  a  U.S. 
encryption  device  during  World  War  II 
that  was  never  compromised  by  the 
enemy,  is  also  developing  an  enterprise 
server-based  version  of  its  software.  The 
enterprise  version  lets  IT  managers 
encrypt  outgoing  e-mail  at  the  server 
based  on  a  set  of  policies.  No  software  is 
needed  for  desktop  clients. 

Getting  around  PKI 

Encrypted  e-mail,  which  has  been  dis¬ 
cussed  for  nearly  two  decades,  suffers 
from  many  problems,  most  notably 
encryption  key  management.  With  a  pub¬ 
lic-key  infrastructure  (PKI),  users  must 
have  a  public  key  for  every  recipient  and 
IT  must  manage  sets  of  private  encryp¬ 
tion  keys. 

Sigaba  reduces  key  management  by 
providing  only  a  symmetrical  key  to 
encrypt  and  decrypt  messages,  eliminat¬ 


ing  public  and  private  keys.  SigabaSecure 
assigns  keys  to  messages,  not  users. 

“I’m  looking  for  the  gotchas  in  the  soft¬ 
ware,”  says  Eric  Arnum,  editor  of 
“Messaging  Online,”  an  e-mail  newsletter. 
“When  you  make  things  easy  for  the  end 
user  you  have  to  make  compromises,  but 
I  haven’t  seen  those  yet  with  Sigaba.They 


have  eliminated  the  fatal  flaw  in  PKI  [key 
management] .” 

Other  vendors,  such  as  Zixlt,  HushMail 
and  Tumbleweed,  also  are  focusing  on 
secure  message  delivery,  but  Sigaba’s  dif¬ 
ference  is  that  it  never  touches  the  actual 
e-mail. 

See  Sigaba,  page  34 
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Enterprise  Applications 

McAfee  aims  to  shield  networks  from  PDA  viruses 


Pocket  protector 


McAfee's  latest  software  is  designed  to  safeguard  corporate 
networks  from  viruses  carried  on  PDAs  and  other  handheld  devices, 
McAfee's  VirusScan  Handheld  software: 

Scans  for  viruses  as  files  are  transferred  between  a  PDA  and  PC. 

Updates  itself  automatically  over  the  Internet. 

Is  available  for  the  Palm  OS,  Pocket  PC,  Windows  CE  and  EPOC 
platforms. 

Starts  at  $1 2  per  device  for  5,000  devices. 


BY  JAMES  NICCOLAI 

SUNNYVALE ,  CALIF.  — 
Network  Associates’  McAfee 
division  last  week  released  new 
software  designed  to  protect 
corporate  networks  from  virus¬ 
es  carried  on  PDAs  and  other 
handheld  computers. 

Called  VirusScan  Handheld, 
the  software  aims  to  help  com¬ 
panies  deal  with  the  growing 
number  of  employees  who  use 
PDAs  to  transfer  files  between 
their  work  and  home  PCs.  Users 
can  easily  download  a  virus  in  a 
Word  or  Excel  file  to  their  PDAs 
from  their  home  PCs,  and  then 
introduce  the  virus  into  their 
corporate  networks  when  they 
synchronize  the  devices  with 
their  PCs  at  work,  says  Ryan 
McGee,  a  product  marketing 
manager. 

“Handheld  devices  are 
almost  as  dangerous  to  a  corpo¬ 
rate  network  as  the  floppy 
disk,”  McGee  says. 

McAfee’s  new  product  is 


installed  on  a  user’s  work  PC 
and  on  the  user’s  PDA,  and 
scans  for  viruses  as  files  are 
transferred  to  and  from  the 
PC.  The  software  checks  for 
“all  the  regular  types  of  viruses 
you’d  be  able  to  check  for 
using  a  PC  version  of  the  prod¬ 
uct,”  McGee  says. 

VirusScan  Handheld  can  be 
downloaded  to  a  PC  from  the 
Web  and  installs  itself  the  next 
time  the  PDA  and  PC  are  syn¬ 
chronized.  The  software 
updates  itself  automatically 
over  the  Internet,  and  is  avail¬ 
able  for  each  of  the  four  main 
device  platforms:  Palm’s  Palm 
OS,  Microsoft’s  Pocket  PC  and 
Windows  CE,  and  Symbian’s 
EPOC. 

VirusScan  Handheld  is  essen¬ 
tially  the  same  product  the 
company  already  offers  for 
home  users,  but  is  now  priced 
and  packaged  for  businesses, 
McGee  says.  Pricing  starts  at 
$12  per  device  for  5,000 
devices. 


While  McAfee’s  software 
may  keep  viruses  from  being 
passed  between  a  handheld 
computer  and  corporate  net¬ 
work,  it  doesn’t  prevent  viruses 
from  being  delivered  wirelessly 
to  the  PDA  in  the  first  place. 
Only  one  or  two  significant 
viruses  have  hit  wireless  PDAs 
and  cell  phones,  but  many 
industry  watchers  see  wireless 
as  the  next  big  challenge  for 
security  software  vendors  — 
and  hackers. 


“As  virus  writers  become 
more  versed  in  writing  for  that 
[wireless]  environment”  offer¬ 
ing  protection  against  viruses 
delivered  over  the  airwaves  will 
become  critical,  McGee  says. 

“We’re  working  on  that 
challenge,  and  we  hope  to 
introduce  a  product  soon, 
hopefully  before  the  virus 
writers  get  there,”  McGee  says. 
“We’re  challenged  in  [the  wire¬ 
less]  environment  with  the 
processor  power  and  the 


memory  that’s  available  to  us. 
The  good  side  is  that  the  virus 
writers  are  challenged  by 
those  restrictions,  too.” 

F-Secure,  one  of  McAfee’s 
rivals,  became  one  of  the  first 
vendors  to  offer  antivirus  soft¬ 
ware  for  wireless  devices. 

McAfee  can  be  reached  at 
www.mcafee.com 

Niccolai  is  with  IDG  News 
Services’  San  Francisco 
bureau. 


SilverTech, 

continued  from  page  33 

PIE  isn’t  a  virtual  private 
network,  extranet  or  filter, 
St.  John  says,  although  it 
incorporates  elements  of  all 
three. 

“What  we’re  trying  to  do 
is  bring  information  off 
the  Internet  and 
through  these 
multiple  layers  of 
security  so  we 
can  get  to  C2 
certification,”  St. 

John  explains.  C2 
is  a  security 
standard  required 
by  some  gov¬ 
ernment  agencies 
and  private  com¬ 
panies. 


Already  in  use 

SilverTech  is 
already  using  PIE 
to  host  eKIDS 
Internet,  a  private  network  for 
children.  eKIDS  takes  content 
off  the  Internet,  and  after 
ensuring  it  is  appropriate  for 
children,  removes  any  advertis¬ 
ing  and  serves  the  content 
back  up  over  its  own  network. 

The  service  is  free  for  six 
months  and  costs  $12  per 


month  after  the  free  period. 

SilverTech’s  technology 
partners  include  Hewlett- 
Packard,  Cisco  and  hosting 
firm  AboveNet.  HP  and 
Cisco  also  provided  start-up 
funding. 

Clients  signing  on  with 
SilverTech  will  have  their 
applications  housed  on  HP 


servers  and  their  network 
connections  handled  by 
Cisco  switching  gear. 

St.John  says  SilverTech  will 
use  a  variety  of  hosting  part¬ 
ners  so  it  can  house  a  client’s 
servers  in  a  geographic  loca¬ 
tion  appropriate  for  the 
client. 


PIE  is  available  immedi¬ 
ately.  Prices  will  start  around 
$580,000,  St.  John  says,  but 
she  expects  most  builds  to 
cost  more  than  $1  million. 
The  vendor  is  willing  to  take 
over  full  management  respon¬ 
sibility  for  a  client’s  server 
farm,  but  St.  John  adds  that 
because  of  security  concerns 


many  clients  may  not  want  to 
hand  over  full  control. 

If  clients  don’t  want 
SilverTech  to  manage  their 
PIE,  the  company  will  make 
other  arrangements,  St.  John 
says. 

SilverTech:  www.silvertech 
inc.com 


Sigaba, 

continued  from  page  33 

When  a  user  sends  a  message 
using  SigabaSecure,  the  plug-in 
communicates  with  a  key 
server  maintained  by  Sigaba. 
The  server  authenticates  the 
user  over  a  Secure  Sockets 
Layer  connection  before  creat¬ 
ing  a  key  and  message  identifier 
for  the  e-mail,  and  sending  it 
back  to  the  user.  The  key  uses 
the  Blowfish  algorithm  to 
encrypt  the  message  on  the 
user’s  desktop  and  send  it  off. 

The  process  is  a  subsecond 
performance  hit,  according  to 
Sigaba  officials. 

The  process  is  reversed  for 
the  recipient  of  the  message.  If 
the  recipient  does  not  have 
the  plug-in,  it  can  be  down¬ 
loaded.  If  the  recipient  doesn’t 
use  an  e-mail  client  that  sup¬ 
ports  Sigaba’s  software,  Sigaba 
can  decrypt  the  message  and 
deliver  it. 

“Encryption  that  is  simple 
and  can  be  plugged  into  exist¬ 
ing  software  is  essential,”  says 
David  Raucher,  president  of 
Telcopoint  in  Dallas.  “With 
sales  documents  and  bills 
being  sent  as  attachments,  you 
need  security.”  Raucher  is 
using  Sigaba  as  part  of  Telco- 


point’s  Secure  PC  Call,  an 
encrypted  voice-over-IP  con¬ 
ference  calling  service.  Sigaba 
provides  secure  notification  to 
participants  invited  into 
Secure  PC  Call. 

In  the  fall,  Sigaba  will  release 
the  enterprise  version  of  the 
software,  which  runs  on 
Windows  NT,  Unix  and  Linux. 

“IT  managers  will  have 
access  to  the  key  for  any  mes¬ 
sage,”  says  Richard  Bliss,  vice 
president  of  marketing  for 
Sigaba. 

The  company  will  provide 
free  server  software  to  compa¬ 
nies  and  charge  approximately 
$  1  per  user  to  manage  keys. 

Sigaba:  www.sigaba.com 


www. nwfusion.com 


CRYPTIC 

E-MAIL 

If  you've  received  a  Sigaba 
e-mail  you  can't  read,  the 
company  has  an  online 
decryptor  you  can  use. 
Also  get  white  papers  and 
technical  support  online. 


PROFILE:  SILVERTECH 


Location:  San  Francisco 

Product:  Private  Internet  engine  —  a  combination  of  a  private 

network  connection,  proprietary  encryption  software 
and  firewalls  targeted  at  vertical  industries  requiring 
strong  security. 

Founded:  February  1997 

Founder  and  CEO:  El  St.  John 

Employees:  63 

Funding:  $25  million  from  Hewlett  Packard  and  Angel  Group 

Fun  fact:  SilverTech  is  the  founder  of  eKIDS  Internet,  a  private  network  for  children 

that  provides  advertising  free  content. 


El  St.  John 
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Ask  about  Den™  systems, 
like  this  PowerEdge™  server, 
featuring  Intel*  Pentium®  III 
processors. 


pentium®/// 


At  the  Dell™  Factory  Outlet  online,  we  refurbish  top  Dell  technology  and  offer 
it  to  you  at  a  discount.  How?  When  Dell  desktops,  notebooks,  workstations 
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find  the  system  that's  right  for  you.  speak  with  our  helpful  reps: 
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888.274.4589 


www.dell.com/outlet  oeu-Oo 
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Enterprise  Applications 


'Net  Insider  .  Scott  Bradner 

T HERE  MAY  BE  HOPE  YET 


In  the  absence  of  regulatory  distor¬ 
tions,  it  has  been  hard  to  see  much 
of  a  long-term  future  for  most  of  the 
traditional  phone  world.  But  a  role  may 


be  emerging,  one  based  on  what  has 
been  one  of  the  functions  that  tradi¬ 
tional  phone  companies  do  best. 

For  good  or  ill,  the  Internet  is  spread¬ 


ing  its  tentacles  everywhere.  It  will  not 
be  long  before  broadband  Internet  ser¬ 
vice  will  be  available  to  most  homes 
and  businesses  in  the  U.S.  and  a  num¬ 


ber  of  other  countries.This  service  will 
be  distributed  via  cable  modem,  DSL 
lines  and,  it  now  appears,  fiber  in  the 
case  of  many  apartment  buildings  and 
office  parks.  This  service  will  easily  be 
fast  enough  to  support  high-quality, 
real-time  interactive  voice  —  that  is, 
service  that,  at  its  minimum,  will  be 
equal  to  traditional  phone  service  for 
all  but  a  few  functions.This  service  also 
will  be  far  superior  in  the  availability  of 
advanced  features  because  of  the  inte¬ 
gration  with  IP  service. 

The  few  places  where  current  IP 
telephony  technology  does  not  mea¬ 
sure  up,  such  as  lifeline  and  enhanced 
911  services,  are  being  worked  on.  It 
may  even  turn  out  that  mixing  wire¬ 
less  telephony  with  Internet-based 
telephony  may  be  a  good  way  to  meet 
the  lifeline  requirements  rather  than 
bulletproofing  IP-phones. 

One  of  the  Internet’s  features  is  that 
providers  of  IP-based  services  do  not 
need  to  be  associated  with  carriers. 
Thus  it  will  be  easy  for  new  companies 
to  set  up  to  do  most  of  the  “advanced” 
(advanced  in  the  context  of  phone  ser¬ 
vice,  anyway)  functions  such  as  call 
forwarding  and  voice  mail  without  giv¬ 
ing  the  local  phone  company  a  piece 
of  the  action.  And  because  IP  phones 
themselves  can  mimic  the  operation  of 
wire-line  phones,  no  relearning  is 
needed. 

In  the  above  environment,  the  future 
of  traditional  phone  companies’  voice 
business  is,  at  best,  threatened.  It  will 
be  hard  for  them  to  compete  where 
voice  rides  for  no  additional  cost  on  a 
data  infrastructure.  The  only  time  that 
the  user  should  get  a  bill  for  minutes  of 
voice  use  is  when  he  or  she  has  to  con¬ 
tact  someone  still  on  the  old  voice  net¬ 
work.  There  will  be  a  lot  of  these  peo¬ 
ple  still  on  the  old  net  at  the  beginning, 
but  the  number  should  decrease 
quickly  as  the  economic  factors  hit. 

But  there  is  something  that  the 
phone  companies  are  quite  good  at, 
and  that  is  billing.  Phone  companies 
may  have  a  viable  future  as  billing  ser¬ 
vice  providers. 

Already,  in  Japan  NTT  DoCoMo 
makes  a  good  chunk  of  revenue  by  act¬ 
ing  as  a  billing  service  for  Web  sites  that 
provide  services  to  the  more  than  10 
million  users  of  its  I-mode  IP  Internet- 
connected  cell  phones.  The  Web  sites 
can  charge  very  small  fees  to  their  cus¬ 
tomers  and  not  have  to  worry  about 
the  costs  of  collecting  the  money.  The 
phone  companies  should  play  to  their 
strength  and  start  getting  out  of  the 
wire  business. 

Disclaimer:  The  weaknesses  of 
Harvard’s  strength  are  best  seen  close- 
up,  but  that  did  not  affect  the  above 
opinion 

Bradner  is  a  consultant  with 
Harvard  University’s  University 
Information  Systems.  He  can  be 
reached  at  sob@sobco.com. 


When  a  leading  U.S.  healthcare  provider 


needed  to  add 


secure 


Internet  access 


to  its  router-based  network ,  and  then 


looked  for  the  ideal  platform 


...they  chose  [Nokia 


Platform  Family 


Nokia  -  the  brand  name  you  associate 
with  the  world's  most  popular  mobile 
phones  -  is  also  an  IP  networking  company. 
For  people  who  manage  increasingly 
complex  network  architectures,  Nokia 
delivers  market  leading  firewall,  VPN  and 
intrusion  detection  applications  tightly 
integrated  with  Nokia  IP  Network 
Application  Platforms. 

Nokia  -  building  networking  products 
to  exceed  your  expectations. 


I  P  3  3  0 


I  P440 


I  P  6  5  0 


IP  Network  Application  Platforms 


INI  OKI  A 

Connecting  People 

For  the  latest  white  papers  and  customer  profiles,  click  on  IP  Networking  at 

www.nokia.com 

1  877  997-9199 

Copyright  Nokia  Internet  Communications  Inc.  2000.  All  rights  reserved.  Nokia  and  Nokia  Connecting  ffcople  are  registered  trademarks  of 
Nokia  Corporation.  Other  product  and  company  names  mentioned  herein  may  be  trademarks  or  trade  names  of  their  respective  owners. 
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Today  machines  will  run. 
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Internet'  Content  Delivery  Technologies 

Subscription  Application! 


I  want  to  receive/continue  to  receive 
my  FREE  subscription  to  Network  World. 


No,  thank  you.  □ 


'Sign> 
i  HereJ 


Signature  (required) 


Date 


TO  QUALIFY:  You  must  supply  your  company  name  and  address.  If  military,  please  specifiy  branch/base. 
If  government,  please  specify  division. 


Name 


Title 


Company 


Division/Mail  Stop/Military  Branch  or  Base 


Street  Address 


City  State  Zip 

Business  phone  ( _ ) _ FAX  ( _ ) _ 

Internet  E-mail  address  _ _ 

We  would  like  to  send  you  periodic  information  via  e-mail  on  3rd  party  networking  products/services. 

□  Check  here  if  you  DO  NOT  wish  to  receive  this  information. 

If  there  is  a  parent  company,  please  provide  name: _ 

□  My  home  address  is  also  my  business  address. 

Optional  delivery  address:  Enter  your  home  address  below  if  your  company  will  not  accept  delivery  at  your  business  address: 


Street  Address  City  State  Zip 


Publisher  reserves  the  right  to  serve  only  those  individuals  who  meet  publication  qualifications.  ALL  questions  must  be  answered. 
Incomplete  forms  will  not  be  processed.  Free  subscriptions  available  to  qualified  US  applicants.  International  rates  available  upon  request. 

 B800 


j  I  What  is  the  principal  business  activity  at  your  location? 

(check  ONE  only) 

01.  □  Manufacturing  (other) 

02.  □  Finance/Banking 

03.  □  Insurance/Real  Estate/Legal 

04.  □  Health  Care  Services 

05.  □  Hospitality/Entertainment/Recreation 

06.  □  Media/TV/Cable/Radio/Print 

07.  □  Retail/Wholesale  Tradeflusiness  Services 
08.  □  Transportation 

09.  □  Utilities/Process  Industries/Mining, 
Construction,  Petroleum,  Refining, 
Agriculture,  Forestry 

10.  □  Education 

11.  □  Govemment/Miiitary/Aerospace 

12.  □  Consulting  (Independent)  * 

13.  □  Communications  Carriers 

14.  □  ISP 

15.  □  ASP 

16.  □  Manufacturing  (Computer/ 

Communications/OEM) 

17.  □  Resellers/VARs/VADs/Integrators/ 

Distributors* 

(Computers/Communications)* 

18.  □  Other  (please  specify) 

*Attn  Consultants,  Integrators, 

Distributors,  Resellers:  Please  complete 
form  based  on  ALL  clients  and  your  own 
business  needs 

P:  What  is  your  primary  job  function?  (check  one  only) 

S:  What  is  your  secondary  job  function?  (checkjSLL  that  apply) 


p  s 

□  1.  □  Network  Management 

□  2.  □  LAN  Management 

□  3.  □  Datacom/Telecom  Management 

□  4.  □  CIO/CTO/IS/IT/MISt 

Systems  Management 


P  S 

□  5.  □  Intemet/Intranet/ 

E-Commerce  Management 

□  6.  □  Engineering  Management 

□  7.  □  Corporate  Management  (CEO, 

COO,  CFO,  Pres.,  VP,  Dir,  Mgr.) 


P  S 

□  8.  □  Consultant  (Independent) 

□  9.  □  Other  (please  specify) 


{V'  1  1  What  is  the  estimated  value  of  Network  equipment  and  services  that  you  specify, 

recommend,  or  approve  the  purchase  of? 

(Please  print  the  appropriate  number  code  on  the  line  next  to  each  product  category.  Please  complete  ALL  categories  A-0.) 

1.  $100  Million  or  more 

2.  $50  Million  to  $99.9  Million 

A _ Large  Systems 

(Mainframes/Minis) 

H 

_ Internetworking 

(including  Routers,  Switches) 

3.  $25  Million  to  $49.9  Million 

B  _ Desktops 

1 

_ Intemet/Web/E -commerce 

4.  $10  Million  to  $24.9  Million 

( Micros/Laptops/  Workstations) 

J 

_ Intranet/Extranet 

5.  $1  Million  to  $9.9  MiUion 

C _ Mobile 

K 

_ Remote  Access 

6.  $100,000  to  $999,999 

(including  PDAs,  Wireless) 

D  Servers 

L 

_ Peripherals 

7.  $50,000  to  $99,999 

E _ LANs 

M 

_ Software 

8.  Under  $50,000 

F _ WAN  Equipment 

N 

_ Services/Support 

9.  None  of  the  above 

G_ Carrier  Services 

O 

_  Storage 

What  is  the  total  number  of  sites  for  which  you  have  purchase  influence? 

(check  ONE  only) 


100+  2.  □  50  to  99  3.  □  20  to  49  4.  □  10  to  19  5.  □  2  to  9  6.  O  1 


7.  □  None 


5. 

What  is  the  total  number  of  Servers/Clients/LANs  installed/planned  at  your  location/ 
in  your  entire  organization?  (check  one  box  in  each  column) 

SERVERS 

CLIENTS 

LANs 

1  At  Location 

Entire  Org. 

1  At  Location 

Entire  Org.  i 

1  At  Location 

Entire  Org.  1 

A 

B 

c 

D 

E 

F 

□ 

l. 

50,000+ 

□ 

□ 

1. 

50,000+ 

□ 

□ 

1. 

50,000+ 

□ 

□ 

2. 

10,000  to  49,999  □ 

□ 

2. 

10,000  to  49,999 

iD 

□ 

2. 

10,000  to  49,999 

□ 

□ 

3. 

1,000  to  9,999 

□ 

□ 

3. 

1,000  to  9,999 

□ 

□ 

3. 

1,000  to  9,999 

□ 

□ 

4. 

100  to  999 

□ 

□ 

4. 

100  to  999 

□ 

□ 

4. 

100  to  999 

□ 

□ 

5. 

50  to  99 

□ 

□ 

5. 

50  to  99 

□ 

□ 

5. 

50  to  99 

□ 

□ 

6. 

10  to  49 

□ 

□ 

6. 

10  to  49 

□ 

□ 

6. 

10  to  49 

□ 

□ 

7. 

1  to  9 

□ 

□ 

7. 

1  to  9 

□ 

□ 

7. 

1  to  9 

□ 

□ 

8. 

none 

□ 

□ 

8. 

none 

□ 

□ 

8. 

none 

□ 

6. 

What  is  your  scope  and  involvement  in  purchasing  decisions  for  network  products  and 
services  for  your  enterprise? 

A.  Scope  (check  ONE  only) 

CORPORATE: 

1.  □  Entire  Enterprise/Multiple  Enterprises 

2. D  Division/Multiple  Divisions 

3. D  Department 

4. D  None 

B.  Involvement  (check  ALL  that  apply) 

1.  □  Create  Network/IT  Strategy  4.  □  Evaluate  Products/Services 

2.  □  Recommend/Specify  Brand  5.D  Determine  the  Need 

3.  □  Approve  Purchase  6.  □  None 

Cl  What  is  the  estimated  number  of  employees  at  your  location/in  entire  organization? 

(check  ONE  in  eactt  section) 

A.  At  your  location: 

B.  Entire  organization: 

1.  □  Over  20,000  6.  □  500-999 

1.  □  Over  20,000  5.  □  1,000-2,499 

2.  □  10,000-  19,999  7.  □  250-499 

2.  □  10,000-  19,999  6.  □  500-999 

3.  □  5,000  -  9,999  8.  □  100-  249 

3.  □  5,000-9,999  7.  □  499  or  less 

4.  □  2,500  -  4,999  9.  □  99  or  less 

4.  □  2,500  -  4,999 

5.  □  1,000  -  2,499 

Please  indicate  the  Internet/lntranet/WAN/LAN/Remote  products/services  that  you  are 
currently  involved  in  purchasing  or  plan  to  purchase  (check  au that  apply) 

A.  Currently  involved  in  purchasing  B.  Plan  to  purchase 


INTERNET/INTRANET - 

A  8 

□  01.  □  VPN  Equipment 

□  02.  □  VPN  Services 

□  03.  □  Firewalls/Security/Encryption 

□  04.  □  Electronic  Commerce  Tools 

□  05.  □  Web  Servers/Software 

□  06.  □  Internet  Services 

LANs/INTERNETWORKING  - 

A  B 

□  16.  □  Local-Area  Networks 

□  17.  □  Network  Operating  System 

Software  (NOS) 

□  18.  □  Intel  Based  Servers 

□  19.  □  Intel  Based  Multiprocessor  Servers 

□  20.  □  RISC  Based  Servers 

□  21.  □  Clustered  Servers 

□  22.  □  Print  Servers 

□  23.  □  Routers 

□  24.  □  Layer  2  Switches 

□  25.  □  Layer  3  Switches 

REMOTE/WIRELESS  _ 

A  B 

□  40.  □  PDAs 

□  41.  □  Remote  Access  Products 

WAN  EQUIPMENT  &  SERVICES  _ 

A  B 

□  45.  □  Modems 

□  46.  □  Cable  Modems 

□  47.  □  Asynchronous  Transfer  Mode  (ATM) 

□  48.  □  Frame  Relay  Equipment 

including  FRADS 

□  49.  □  Frame  Relay  Services 

□  50.  □  ISDN  Equipment/Services 


A  B  A  B 

□  07.  □  Web  Hosting  □  13.  □  Web  Based  Collaboration/ 

□  08.  □  Content  Hosting  Groupware 

□  09.  □  Traffic  Management  □  14.  □  Web  Acceleration/Caching/ 

□  10.  □  Web  Development  Tools  Load  Balancing  Products 

□  11.  □  Management/Monitoring  Software  D  15.  □  Other  Intemet/Intranet 

□  12.  □  Web  Based  Management  Tools 


□  26.  □  Layer  4-7  Switches 

□  27.  □  ATM  Switches 

□  28.  □  Token-Ring  Switches 

□  29.  □  Network  Storage  (NAS,  SANs) 

□  30.  □  Storage/Backup 

(Optical,  Disk,  Tape,  RAID) 

□  31.  □  Network  Test/Diagnostic  Tools 

□  32.  □  UPS 

□  33.  □  Network  Interface  Cards 

(NICs,  PCMCIA) 


□  34.  □  Hubs/Intelligent  Hubs/ 

Stackable  Hubs 

□  35.  □  Cables, Connectors,  Baiuns 

□  36.  □  Management  Frameworks 

□  37.  □  Call  Center  Tools 

□  38.  D  Voice  over  LAN 

□  39.  □  Other  Local-Area  Network/ 

Internetworking 


□  42.  □  Remote  Access  Services 

□  43.  □  Wireless  Data  Equipment/Services 


□  44.  □  Other  Remote/Wireless 


□  51.  □  FT-l/T-l/T-3  Services 

□  52.  □  xDSL  Services/Products 

□  53.  □  Diagnostic/Test  Equipment 

□  54.  □  DSU/CSU 

□  55.  □  PBXs 

□  56.  □  Voice/Video  over  IP  Gateways 

□  57.  □  Videoconferencing 


A  B 

□  58.  □  Managed  LAN/Router  Services 

□  59.  □  Fax  Servers/Services 

□  60.  □  Other  WAN  Equipment/Services 

A  B 

None  of  the  above  (1  -  60)  □  61.  □ 


Please  indicate  the  Network  hardware/software/services  that  you  are  currently  involved 
in  purchasing  or  plan  to  purchase:  (check  all  that  apply) 

A.  Currently  involved  in  purchasing  B.  Plan  to  purchase 


SYSTEMS/PERIPHERALS  - 

A  B 

□  01.  □  Laptops/Notebooks 

□  02.  □  PCs 

□  03.  □  Windows  Terminals/Thin  Clients 

□  04.  □  Workstations 


SOFTWARE/APPLICATIONS  . 
A  B 


□  05.  □  Storage/Backup 

(Optical, Disk, Tape, RAID) 

□  06.  □  Printers 

□  07.  □  Printer/Fax/Copier  Hybrids 

(Multifunction  Printers) 


□  08.  □  Minis 

□  09.  □  Mainframes 

□  10.  □  Fax/Modem  Boards 

□  11.  0  Memory/Chips/Boards/Cards 

□  12.  □  Other  Computers/Peripherals 


□  13.  □  Network  Management 

(inch  SNMP) 

□  14.  □  Systems  Management 

□  15.  □  Security 

□  16.  □  Directory  Services 

□  17.  □  Operating  Systems 

□  18.  □  Applications  Development  Tools 

□  19.  □  Database  Management/RDBMS 


□  20.  □  Groupware 

□  21.  □  E-Mail 

□  22.  □  Enterprise  Resource  Planning 

(ERP) 

□  23.  □  EDI 

□  24.  □  Desktop  Videoconferencing 

□  25.  □  Imaging 

□  26.  □  Middleware/Serverware 


□  27.  □  Document  Management 

□  28.  □  Site  Metering  Tools 

□  29.  □  Datawarehousing 

□  30.  □  Anti  Virus  Software 

□  31.  □  Multimedia 

□  32.  □  Helpdesk 

□  33.  □  Other  Software/Applications 


SERVICES 
A  B 


A  B  A  B 

□  35.  □  ASP  Services  □  38.  □  Education/Training  Services 

□  36.  □  Call  Center  Outsourcing  □  39.  □  Other  Services  a  b 

□  37.  □  Systems  Integration/Consulting  None  of  the  above  (1-39)  □  40.  □ 


□  34.  □  BPO  (Business  Process 

Outsourcing  inch  Financial 
Services,  HR,  Logistics,  etc.) 


Jr)  Please  indicate  the  platforms  that  are  currently  installed/planned:  «  all  that  apply) 

J  -A:j\  A.  Currently  installed  B.  Planned  for  purchase 

NFTWORK  PROTnfOK 

A  B 

□  01.  □  TCP/IP 

□  02.  □  IPV6 

□  03.  □  SNA 

□  04.  □  Novell  IPX/SPX 

LAN/WAN  ENVIRONMENT 

A  B 

□  05.  □  APPC/APPN/LU  62 

□  06.  □  NETBIOS/NETBUE1 

□  07.  □  NFS 

□  08.  □  SNMP 

A  B 

□  09.  □  HTTP 

□  10.  □  Other  Network  Protocols 

A  B 

□  11.  □  Gigabit  Ethernet 

□  12.  □  Switched  Ethernet 

□  13.  □  Fast  Ethernet 

□  14.  □  Ethernet 

□  15.  □  ATM 

□  16.  □  Token  Ringfloken  Ring  Switching 
NETWORK  OPERATING  SYSTEM 

A  B 

□  17.  □  Layer  3,4  Switching 

□  18.  □  FDDI 

□  19.  □  100Base-T 

□  20.  □  lOBase-T 

□  21.  □  Fibre  Channel 

□  22.  □  Wireless  LANs 

A  B 

□  23.  □  DSL 

□  24.  □  ISDN 

□  25.  □  Frame  Relay 

□  26.  □  Private  LineTl,T3,FT-lt  SONET 

□  27.  □  Other  LAN/WAN  Environment 

A  B 

□  28.  □  Windows  NTAVindows  2000 

□  29.  □  Novell  (NetWare  5X) 

□  30.  □  Novell  (NetWare  4X) 

COMPUTER  OPERATING  SYSTEM 

A  B 

□  31.  □  NoveU  (NetWare  2JC3JQ 

□  32.  □  LINUX 

□  33.  □  Microsoft  (LAN  Manager) 

A  B 

□  34.  □  Banyan  (Vines) 

□  35.  □  IBM  (LAN  Server) 

□  36.  □  Other  Network  Operating  System 

A  B 

□  37.  □  NT  Workstation 

□  38.  □  Windows  2000 

□  39.  □  Windows  98TO3.1 

□  40.  □  Intel  based  UNIX 

□  41.  □  RISC  based  UNIX  (inch  SOLARIS) 

A  B 

□  42.  □  LINUX 

□  43.  □  DOS 

□  44.  □  OS/2, OS2  WARP 

□  45.  □  OS/400 

□  46.  □  IBM  MVS/VM/VSE7ESA 

A  B 

□  47.  □  Digital  VMS 

□  48.  □  Macintosh 

□  49.  □  Other  Computer  Operating  System 

A  B 

None  of  the  above  (1-49)  □  50.  □ 

Which  of  the  following  hardware  platforms  are  installed/planned  in  your  company? 

(check  ALL  that  apply) 


A  -  Mainframes  (Large  Scale) 

1.  □  IBM 

2.  □  Other 


B  -  Minis  (Midrange) 

1.  □  IBM  RS/6000 

2.  □  IBM  AS/400 

3.  □  Digital/Tandem/Compaq 

4.  □  Unisys 

5.  □  H-P 

6.  □  Other 


C  -  Workstations 

1.  □  Sun  Microsystems 

2.  □  H-P 

3.  □  Digital/Compaq 

4.  □  IBM 

5.  □  Silicon  Graphics 

6.  □  Other 


What  is  the  estimated  gross  revenue  of  your  entire  company/institution? 

(check  ONE  only) 


1.  □  $20  Billion  or  More  5. 

2.  □  $10  Billion  to  $19.9  Billion  6. 

3.  □  $1  Billion  to  $9.9  Billion  7. 

4.  □  $500  MiUion  to  $999.9  Million  8. 


□  $100  Million  to  $499.9  Million 

□  $50  Million  to  $99.9  Million 

□  $10  Million  to  $49.9  Million 

□  $5  Million  to  $9.9  Million 


9.  □  $4.9  Million  or  Less 

10.  □  None  of  the  above 


For  which  areas  outside  of  the  U.S.A.  do  you  have  purchase  influence? 

(check  All  that  apply) 


□  South  America 

□  Australia 


5.  □  Middle  East 

6.  □  Africa 


7.  □  Canada 

8.  D  None 


FORM:  OOOl 
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Ask 


Dr  Intranet 


By  Steve 
Blass 

Our  intranet  is 
Windows-based. 

I  used  to  work  in 
a  mixed  environ¬ 
ment  with  Unix  sys¬ 
tems,  and  I'm  look¬ 
ing  for  something 
like  the  freeware  nmap  net¬ 
work  scanner  we  had  on  a 
Unix  box  that  will  run  under 
Windows  NT.  And  how  about  a 
free  or  inexpensive  sniffer  pro¬ 
gram  that  will  run  under  NT? 

EEye.com  has  released 
NmapNT  on  its  site  at  www. 
eeye.com/html/Databases/Soft 
ware/nmapnthtml.  Now  Win¬ 
dows  administrators  can  use 
the  top  Unix  network  mapping 
and  scanning  tool.  NmapNT 
uses  the  Windows  port  of  the 
Berkeley  packet  filter  package 
available  from  http://netgroup- 
serv.polito.it/winpcap,  also  the 
home  of  the  Windows  tcpdump 
port,  windump.  You'll  need  to  in¬ 
stall  winpcap  to  use  NmapNT. 
The  NmapNT  package  contains 
copies  of  the  winpcap  drivers 
needed  for  NT.  The  executable 
version  of  NmapNT  distributed 
by  eEye  doesn't  work  well  with 
the  Win  95  winpcap  drivers,  but 
the  source  code  comes  with  the 
package  for  those  who  want  to 
compile  it  using  the  Win  95  ver¬ 
sion  of  the  packet  filter  source 
code.  The  trick  seems  to  be  by¬ 
passing  the  Windows  IP  stack 
and  talking  directly  to  the  net. 

For  the  sniffer  program,  head 
to  http://netgroup-serv.polito.it/ 
analyzer/  for  Analyzer,  a  freely 
distributed  Win32  sniffer  pro¬ 
gram.  It  can  be  used  with  Win¬ 
dows  95/98/NT/2000  platforms. 

It  includes  three  parts:  a  graph¬ 
ical  interface,  an  analysis 
engine  and  a  capture  program. 

Blass  is  a  network  architect 
at  Sprint  Enterprise  Network 
Services  in  Houston.  He  can  be 
reached  at  dr.intranet@paranet. 
com. 


Technology  u'da" 

_  An  Inside  Look  at  the  Technologies 

and  Standards  Shaping  Your  Network 

Simplify  PKI  with  Hybrid  Auth,  XAuth 


BY  LORI  SILVIA 

Companies  deploying  VPNs  are 
turning  to  digital  certificates  to 
achieve  the  security  essential  to 
an  effective  VPN.  Digital  certificates, 
which  must  be  managed  by  a  public-key 
infrastructure  (PKI),  provide  a  level  of  pri¬ 
vacy  and  security  to  VPNs  unequalled  by 
any  other  authentication  method. 

Deploying  a  full-blown  PKI  is  highly 
complex  and  potentially  disruptive  to  a 
network  and  its  users.  Two  new7  protocols 


—  Hybrid  Auth  and  XAuth  —  are  being 
developed  by  the  Internet  Engineering 
Task  Force  (IETF).  They  will  enable  com¬ 
panies  to  employ  a  more  manageable, 
phased  approach  to  PKI  deployment. 

Hybrid  Auth  and  XAuth  are  extensions 
to  the  Internet  Key  Exchange  (IKE)  proto¬ 
col.  IKE  is  an  important  element  of  PKI 
that  defines  how  security  credentials  are 
exchanged  over  the  IP  Security  (IPSec) 
tunneling  protocol.  Using  IPSec  with  IKE, 
one  of  two  types  of  authentication  to 
access  the  network  can  be  employed:  pre¬ 
shared  keys  or  digital  certificates.  While 
preshared  keys,  which  are  unique  to  each 
user,  are  fine  when  employed  by  a  small 
number  of  users,  deploying  a  unique  key 
for  each  remote  user  in  situations  where 


there  may  be  hundreds  or  thousands  of 
remote  users  can  be  an  administrative  bur¬ 
den  and  a  management  nightmare. 

For  simplicity,  some  companies 
deploy  one  key  that  is  shared  among  all 
users.  However,  if  the  password  is  com¬ 
promised,  every  user  name  must  be  asso¬ 
ciated  with  the  new  key. 

When  deploying  DPSec  with  IKE  to 
many  users,  digital  certificates  are  the 
most  scalable  option  for  enterprise  secu¬ 
rity.  However,  a  full  PKI  environment, 
which  can  be  costly  to  implement  and 


complex  to  deploy,  is  required.  In  addi¬ 
tion,  remote  users  must  “enroll”  in  the  PKI. 
Enrollment  can  be  disruptive  and  add 
many  opportunities  for  error. 

Certain  VPN  implementations  of 
Hybrid  Auth  are  enabling  companies  to 
solve  some  of  these  issues  by  leveraging 
legacy  authentication  systems  and  by 
allowing  the  use  of  a  PKI  to  be  centrally 
deployed  and  managed  in  practical  imple¬ 
mentation  phases,  rather  than  all  at  once. 
In  this  approach,  a  digital  certificate  is 
deployed  on  the  VPN  server  at  the  central 
site,  while  remote  users  continue  to  utilize 
such  legacy  authentication  methods  as 
RADIUS  or  SecurlD  to  access  the  corpo¬ 
rate  network.  Because  there’s  no  change 
in  how  remote  users  authenticate,  this 


Hybrid  Authentication  environment  sim¬ 
plifies  initial  digital  certificate  deploy¬ 
ment,  controls  operational  expenses,  and 
minimizes  end-user  impact. 

The  Hybrid  Auth  extension  allows  the 
asymmetric  use  of  digital  certificates 
between  client  and  server.  The  client  ver¬ 
ifies  the  authenticity  of  the  server’s  cre¬ 
dentials  (certificate),  and  the  server  veri¬ 
fies  the  authenticity  of  the  client’s  cre¬ 
dentials.  Companies  benefit  from  the 
interoperability  of  standards-based  IPSec 
with  IKE  as  well  as  the  increased  security 
of  the  PKI  at  the  central  site,  with  no  dis¬ 
ruption  to  remote  users. 

The  XAuth  standard  may  be  seen  as  the 
next  phase  of  PKI  migration.  As  organiza¬ 
tions  move  to  a  full  PKI,  digital  certificates 
are  used  at  the  central  site  and  on  remote 
users’  desktops.  Certain  implementations 
of  the  XAuth  protocol  give  companies  the 
option  to  combine  use  of  legacy  authenti¬ 
cation  methods  and  digital  certificates. 
The  XAuth  extension  to  the  IKE  protocol 
allows  two-factor  authentication  for 
remote  users:  The  digital  certificate  auth¬ 
enticates  the  user’s  machine  or  desktop, 
while  the  use  of  passwords  or  tokens 
binds  that  user  to  his  digital  ED  and  autho¬ 
rizes  him  for  network  access.  VPN  imple¬ 
mentation  using  XAuth  allows  network 
managers  to  centrally  control  authentica¬ 
tion  policy  on  a  group-level  basis,  remote¬ 
ly  synchronizing  and  enforcing  authenti¬ 
cation  policy  changes  out  to  remote 
users’  desktops  as  the  organization  moves 
from  passwords  to  digital  certificates. 

The  Hybrid  Auth  and  XAuth  protocols 
are  especially  beneficial  when  utilizing 
digital  certificates  as  the  authentication 
method  forVPNs.The  many  benefits  these 
protocols  promise  —  greater  manageabil¬ 
ity,  stronger  security,  greater  protection  of 
legacy  system  investments  and  a  more 
practical  approach  to  PKI  —  suggest  that 
they  will  become  IETF  standards. 
Companies  would  do  well  to  ensure  that 
the  VPNs  they  are  deploying  support 
Hybrid  Auth  and  XAuth. 

Silvia  is  senior  product  manager  at 
Indus  River  Networks,  a  developer  of 
remote  access  products.  She  can  be 
reached  at  lsilvia@indusriver.com. 


Got  great  ideas? 

Network  World  is  looking  for  great  ideas 
for  future  Tech  Updates.  If  you've  got  one 
contact  Mark  Brownstain,  Technology 
Editor  (mbrownstein@nww.com). 


HOW  IT  WORKS 

Hybrid  Auth  and  XAuth 

The  most  recent  protocols  developed  by  the  IETF  —  Hybrid  Auth  and  XAuth  — 
provide  companies  with  a  more  manageable  approach  to  public-key  infrastructure 
deployment.  The  protocols  are  based  on  digital  certificates  managed  by  a  PKI  that 
ensure  high-quality  VPN  security. 


Certificate 


o  Hybrid  Auth: 

A  client  sends  credentials  through  a  tunnel 
server  to  a  management  server.  The 
management  server  performs  certificate 
authorization  and  sends  a  certificate  back 
to  the  client.  If  the  client  validates  the 
server's  certificate,  the  tunnel  is  opened. 

G  Hybrid  Auth  with  pilot  PKI 

Similar  to  Hybrid  Auth,  with  one  added 
step  —  the  PKI  information  is  sent  to  a 
PKI  server,  where  the  PKI  lookup  table 
indicates  rights  to  be  assigned  to  the  client. 

o XAuth  — Full  PKI 

Another  variation  of  Hybrid  Auth,  but  the 
digital  certificate  resides  on  the  client 
machine.  XAuth  allows  network  managers 
to  centrally  control  authentication  policy 
on  a  group  level. 
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Technology  Update 


Finding  errors  and  tools 


Gearhead  is  chagrined,  embar¬ 
rassed  and  could  kick  himself 
for  making  a  foolish  mistake  in  last 
week’s  Gearhead  column,  as  reader 


Steven  Foust  pointed  out: 

“You  stated  that  egrep  ‘[Qq][*u]’ 
words,  list  would  ‘find  all  words  that 
start  with  upper  or  lower  case  q’ fol¬ 


lowed  by  anything  that  isn’t  a  ‘u’. 
Thus  the  regular  expression  will  find 
Qantas,  Iraqi  and  Iraq.’ 

Unfortunately,  there  are  a  few 
errors.  If  you  try  this,  you’ll  find  that 
although  words.list  contains  the  three 
words  you  gave,  it  does  not  match  Iraq 
(as  the  end-opline  character  does  not 


match  the  ffuj pattern). Also,  the  regex 
given  would  find  any  word  *contain- 
ing  *  (Q  or  q)  not  followed  by  u  —  not 
words  that  start  with  Q  or  q.  To  find  all 
words  that  start  with  upper  or  lower 
case  ‘q’ followed  by  anything  that  isn’t 
a  ‘u’  would  require  egrep  ‘''[Qqff'^u]’ 
words.list,  which  would  match  Qantas, 
but  not  Iraqi  or  Iraq.  For  further  infor¬ 
mation,  check  out  the  ‘Regular  Expres¬ 
sions’  section  of  the  grep  MAN  page.” 

Our  big  mistake  was  in  the  “start 
with”  claim,  as  Foust  pointed  out.  Fie 
was  also  correct  about  the  end-of-line 
character  not  matching  the  term  [Au], 
although  it  is  our  understanding  that 
some  versions  of  egrep  actually  strip 
the  end-of-line  character  so  that  there’s 
no  character  there  at  all. 

Another  reader,  Edward  Mills,  noted: 

“There  are  two  implementations  of 
regular  expressions:  the  one  used  by 
everyone  in  the  universe,  and  the  one 
used  by  Allaire  (in  my  use  of 
Homesite).  Almost  every  time  I  need  to 
use  Allaire’s  implementation  I’m  forced 
to  look  up  the  idiosyncrasies  on  its  Web 
site.  The  biggest  difference  is  they  treat 
the  entire  file  as  one  long  string,  as 
opposed  to  everybody  else  (that  I  know 
of)  treating  each  line  separately. ” 

Interesting  stuff,  but  Gearhead  knows 
there  are  more  than  two  implementa¬ 
tions  of  regular  expressions. There’s  the 
original  Unix  grep,  extended  grep  or 
egrep,  awk,  GNU  emacs,  and  .  .  .  well, 
check  out  Table  6-1  on  page  182  of  the 
book  we  recommended  last  week: 
Mastering  Regular  Expressions  by 
Jeffrey  Fried! 

This  comes  down  to  a  need  to  know 
the  oddities  of  the  regular  expression 
processor  you  are  using,  or  you  could 
waste  a  lot  of  time. 

How  about  a  cool  tool  to  do  string 
matching  which  can  cope  with  differ¬ 
ent  regex  dialects?  Check  out  Eluent 
Find  in  Eluent  Tools  (currently  at  Version 
1.2)  from  Eluent  (www.eluent.com/). 

This  package  contains  a  collection 
of  file  and  folder  tools  that  run  under 
Microsoft  Windows  95/98/NT/2000. 
Included  are  Eluent  Replace  (“an  inter¬ 
active,  multifile,  multipattern  search- 
and-replace  program  that  uses  Perl  reg¬ 
ular  expressions  and  supports  Perl 
scripting”),  Eluent  Attrib  (“a  program 
for  changing  file  and  folder  attributes”) 
and  Eluent  EOL  (“a  program  for  con¬ 
verting  text  files  to  and  from 
DOS/Windows,  Macintosh  and  Unix 
formats”)  as  well  as  Eluent  Find. 

Find  is  a  file-content  search  tool  that 
“supports  a  variety  of  regular  expres¬ 
sion  dialects.” 

Gearhead  is  rather  impressed  with 
the  Find  tool,  and  thinks  system  man¬ 
agers  may  well  find  it  indispensable. 
Eluent  offers  Eluent  Tools  on  a  30-day 
evaluation,  after  which  the  product  loses 
some  features.  Eluent  Tools  cost  $30. 

Find  any  mistakes ?  Tell  us  at 
gh@gibhs.com. 


Internet 
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Designing  and  Maintaining  a  Killer 
Web  Infrastructure 


FREE  SEMINAR.  Learn  how  to  make  your  Web  infrastructure  faster,  more  powerful,  and  better  able 
to  support  an  always-on,  highly  secure  and  versatile  intranet,  extranet  or  e-business.  The  unique  program 
format  combines  a  content-rich  tutorial  presented  by  an  industry  expert  with  insightful  group  vendor 
presentations  and  dynamic  roundtable  discussions.  You'll  gain  unique  perspectives  in  three  of  the  hottest 
areas  of  infrastructure  design:  content-aware  networking  services,  global  content  and  application  delivery,  and 
service-level  management,  and  find  answers  to  your  questions  about  critical  areas  of  infrastructure  design. 


If  there's  only  one  Web  infrastructure  seminar  you  attend  all  year,  make  this  the  one!  Visit  our  Web  site  to 
view  the  seminar  tour  schedule,  complete  program  agenda,  presenter  credentials  and  to  register  for  this 


Presented  by 
Mark  Hoover  and 
Dave  Logan, 
Acuitive,  Inc. 
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Editorial 

Paying  homage 
to  the  VAX 

Compaq’s  announcement  last  week 
that  it  was  retiring  the  VAX  mini¬ 
computer  originally  created  by 
Digital  passed  largely  unnoticed  by 
the  Web  generation. 

That’s  too  bad,  because  they  owe  a  greater 
debt  to  the  VAX  than  they 
know. 

Acquired  by  Compaq  in 
1998,  Digital  reached  its  peak 
in  the  late  1980s  on  the 
strength  of  the  VAX,  a  line  of 
computers  that  ranged  from 
what  today  we  call  work¬ 
group  servers  to  mainframe¬ 
like  server  clusters. 

AH  of  them  ran  Digital’s 
operating  system,  VMS.  You 
could  write  an  application  for 
a  small  Micro  VAX  and  shift  the 
software  unchanged  to  more  powerful  VAXes  as 
demand  and  load  increased  —  “write  once,  rim 
anywhere,”  long  before  Java  was  even  an  idea. 

The  company  was  pushing  a  wave  of  com¬ 
puting  liberation. Their  boxes  were  making 
what  had  been  mainframe-based  data  more 
accessible  and  easier  to  use  —  “legacy  access” 
and  “application  integration”  before  it  was  a 
trend. 

Digital’s  founder,  Ken  Olsen,  was  a  member 
of  the  MIT  “mafia”  that  led  one  of  the  earliest 
waves  of  high-tech  start-ups,  companies  that, 
in  turn,  were  incubators  for  technical  talent, 
who  went  on  to  create  and  staff  still  other 
companies.  Microsoft  was  one  company  that 
benefited:  VMS  engineers,  notably  Dave  Cutler, 
drove  the  creation  of  Windows  NT. 

Olsen  was  patronizingly  derided  for  criticiz¬ 
ing  "personal"  computers  as  being  pretty  use¬ 
less  to  business.  Now,  at  the  start  of  a  new 
century,  Ins  comments  look  prescient. 

Olsen’s  point  was  that  an  isolated  computer 
had  limited  value  because  the  data  created  on  it 
belonged  to  only  one  person.  What  companies 
needed,  Olsen  said,  was  a  business  computer,  a 
computer  that  was  attached  to  a  network. 

He  was  right  then,  and  he’s  still  right. 

The  VAX,  almost  from  the  start,  was  linked 
to  other  machines  via  Digital’s  DECnet 
scheme.  Long  before  Sun  turned  “the  network 
is  the  computer”  into  a  marketing  slogan, 
Digital  had  made  it  a  reality. 

Another  forward-looking  innovation  was 
Digital  software  that  yoked  together  groups 
of  VAXes  —  “scalability”  long  before  it  was  an 
e-commerce  buzzword. 

The  VAX  may  be  dead,  but  the  principles  it 
embodied  are  being  enshrined  in  the  Web. 

—  John  Cox, 
Senior  editor,  Infrastructure 
jcox@nww.com 
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Not  so  dumb 

I  got  quite  a  kick  out  of  Scott  Bradner’s  column 
“Toysmart,  privacy  dumb”  (www.nwfusion.com, 
DocFinder:  9553).  Isn’t  anyone  catching  the 
irony  here  —  while  Bradner  rightly  complains 
that  the  sale  of  Toysmart’s  customer  files  is  in 
violation  of  Toysmart’s  stated  privacy  policy,  he 
leaves  out  the  fact  that  bankruptcy  law  requires 
a  bankrupt  firm  to  maximize  returns  in  a  liquida¬ 


tion  proceeding.  It’s  quite  amazing  that  Toysmart  and 
Disney  are  being  pilloried  —  the  law  simply  has  left 
them  no  choice  but  to  try  to  sell  these  assets. 

Even  more  amazing,  Bradner  and  many  others  who 
have  written  on  this  topic  seem  to  believe  that  our 
government  somehow  is  going  to  address  tins  issue 
but  are  completely  missing  the  point  that  the  govern¬ 
ment  caused  this  problem  for  the  aforementioned 
reasons.  What  a  racket  —  we  pay  taxes  to  create  the 
problem  and  then  we  pay  more  taxes  to  “solve”  it. 

It’s  easy  to  point  fingers  at  “dumb”  companies,  but 
this  situation  is  not  about  whether  Disney/Toysmart 
“get  the  ’Net”  or  “get  privacy.”  It  is  about  the  fact  that: 
a)  nobody  has  really  figured  out  how  to  make  money 
in  this  marketplace  yet,  which  will  b)  lead  to  many 
more  Toysmart-like  business  failures,  which  c)  create 
more  of  the  “privacy  violations”  that  have  so  many 
people  up  in  arms  right  now.  This  is  unavoidable,  but 
the  solution  is  absolutely  not  for  the  Federal  Trade 
Commission  or  any  other  federal  agency  to  layer  new 
laws  on  top  of  current  ones.  Doing  so  will  only  put 
more  companies  in  the  type  of  no-win  situation  in 
which  Disney/Toysmart  currently  finds  itself. 

Chris  Selland 
Vice  president  of  e-business  strategies 
The  Yankee  Group 
Boston 


Deceptive  numbers 

Your  story  “Leaving  NetWare  behind”  (www.nw 
fusion.com,  DocFinder:  9554)  was  typical  overhype 
of  Novell  “defections”  and  Windows  NT  superiority. 
Chase  Manhattan’s  decision  to  move  50  out  of  700 
servers  from  NetWare  to  Win  2000  is  hardly  a  land¬ 


slide.  At  United  Parcel  Service,  the  critical  file, 
print  and  user  authentication  services,  which 
are  the  bread  and  butter  of  what  a  network 
server  is  supposed  to  do,  will  remain  NetWare. 

I  keep  seeing  these  huge  numbers  of  server 
licenses  Microsoft  is  selling  for  NT  as  evidence 
that  Microsoft  is  killing  Novell. Those  numbers 
reflect  NT’s  use  as  an  applications  platform,  not 
as  a  network  server.  By  the  numbers  you  would 
think  that  my  shop  is  NT:  We  have  one  NetWare 
4.12  server  and  three  NT  servers.  But  the  NT 
servers  are  running  specific  applications:  a  SQL 
Server  database  application,  a  Lotus  Domino  server 
and  a  call  logger  program  for  our  phone  system. 

The  major  functions  on  which  the  network  relies 

—  file,  print,  authentication  and  directory  services 

—  are  all  NetWare. That  is  what  should  determine 
how  successful  the  server  platform  is,  not  how 
many  applications  it  runs. 

John  Friel 
Boston 

Hardly  struggling 

It  is  interesting  that  your  story  “Staying  alive” 
(www.nwfusion.com,  DocFinder:  9555)  states  that 
Novell  is  “struggling.”  I  don’t  see  Novell  struggling 
any  more  than  other  independent  software  vendors 
attempting  to  make  a  stake  in  the  Internet  arena.  At 
least  we  have  products  to  sustain  us  while  we 
make  the  transition. 

Financially  Novell  has  plenty  of  cash  and  no 
debt.  So  obviously  your  story  isn’t  referring  to  our 
money  situation.  So  what  if  we  didn’t  hit  the  num¬ 
ber  we  wanted;  the  real  question  is  money  out  vs. 
money  in.  In  this  case,  we  did  well.  Stock  price  is 
another  story,  but  the  average  person  doesn’t  have 
enough  fingers  and  toes  to  count  the  Fortune  100 
companies  that  had  a  bad  quarter  this  year. 

I  agree  that  Novell  hasn’t  been  very  good  with 
marketing.  Otherwise,  I  see  Novell  as  having  more 
going  for  it  than  not.  At  least  people  know  what 
Novell  is  capable  of,  which  is  more  that  one  can  say 
about  most  companies  getting  in  the  Internet  arena. 

Brian  Six 
Systems  engineer 
Novell 
San  Diego 


Send  letters  to  nwnews@nww.com  or  John 
Dux,  editor  in  chief,  Network  World,  118 
Turnpike  Road,  Southborough,  MA  01772. 
Please  include  phone  number  and  address 
for  verification. 
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Totally  Unplugged .  Ira  Brodsky 

The  threat  and  promise  of  ’Net- based  democracy 


As  we  head  into  the  final  campaigns  of  2000,  the 
Internet’s  role  in  our  political  process  is  grow¬ 
ing.  More  information  empowers  the  electorate 
to  make  better-informed  decisions.  But  beware 
of  direct  democracy  schemes  that  could  help 
dishonest  politicians  fool  more  of  the  people 
more  of  the  time. 

The  Internet  enhances  representative  democracy.  It 
gives  voters  immediate  access  to  party  platforms,  can¬ 
didates’  positions  and  speech  transcripts.  It  gives  can¬ 
didates  with  limited  funds  a  realistic  chance  of  reach¬ 
ing  millions  of  voters.  And  it  provides  everyone  with 
new  forums  for  discussing  issues. 

Indeed,  the  ’Net  could  be  used  to  enact  real  cam¬ 
paign  reform.  Instead  of  saddling  candidates  with 
more  fundraising  rules,  which  usually  benefit  incum¬ 
bents  and  always  seem  to  leave  loopholes,  the  ’Net 
would  give  teeth  to  full-disclosure  laws.  We  can  ensure 
that  voters  know  exactly  where  the  money  is  coming 
from  by  requiring  candidates  to  publish  the  names, 
amounts  and  dates  of  contributions  over  $1,000.  Vote- 
net  (www.votenet.com)  already  provides  considerable 


data  on  campaign  contributions. 

The  ’Net  is  helping  major  parties  and 
candidates  do  a  better  job  of  promoting 
their  causes.  Campaign  Web  sites  include 
frequently  asked  questions,  sign-up  forms 
for  getting  involved  and  voter  registra¬ 
tion  links. The  'Net  is  also  helping  voters 
see  beyond  the  sound  bytes.  Rather  than 
relying  on  media  analysts,  some  of  whom  are  biased, 
you  can  get  a  reasonably  clear  picture  of  where  the 
candidates  stand  by  visiting  their  official  Web  sites. 

But  there’s  a  dark  side.  ’Net-based  direct  democracy 
schemes  promise  true  “government  by  the  people.”  It’s 
an  alluring  idea.  As  the  Committee  for  Direct  Democ¬ 
racy  (www.pangea.ca/~sage2509/direct-democracy) 
proclaims:  “We  can  replace  politicians  at  all  levels  of 
government  (federal,  state  and  local)  with  computers.” 

Some  groups  promoting  direct  democracy  say  our 
present  form  of  government  was  crafted  as  a  solution 
to  logistical  problems.  According  to  the  Direct  Democ¬ 
racy  Online  Project  (www.crosswinds.net/omaha/- 
citizen),  representative  democracy  was  conceived  “to 


get  around  the  practical  problem  [that]  . . . 
the  people  . . .  could  not  all  be  physically  pre¬ 
sent  to  debate  and  cast  a  ballot  in  one  loca¬ 
tion.”  Now  that  we  can  do  these  things  from 
home  via  the  ’Net,  they  argue,  there  is  no 
longer  any  need  for  elected  representatives. 

However,  direct  democracy  could  have 
the  opposite  effect  from  what  supporters 
desire.  Instead  of  letting  the  electorate  make  better 
decisions,  demagogues  could  use  the  ’Net  to  get  their 
way  through  hastily  arranged  elections  and  referen- 
dums.  And  instead  of  leading  to  social  tranquility, 
direct  democracy  would  leave  those  on  the  losing  side 
empty-handed,  increasing  voter  disaffection. 

Not  everything  that  is  technically  feasible  is  desir¬ 
able.  Rather  than  using  the  ’Net  to  replace  our  leaders, 
we  should  use  it  to  do  a  better  job  of  choosing  and 
monitoring  them. 

Brodsky  is  president  ofDatacomm  Research  Co.  in 
Chesterfield,  Mo.  He  can  be  reached  at  ibrodsk)’@ 
datacommresearch.com. 


On  Security .  Winn  Schwartau 

Security  hiring  practices  need  to  come  of  age 


Last  month  I  attended  and  spoke  at  two  hacker 
conventions:  Hope2K  (H2K),  put  on  by  2600 
Magazine  in  New  York,  and  DefCon  in  Las 
Vegas.  My  conclusion,  after  having  attended 
these  and  dozens  of  other  hacker  events  in  the 
past  15  years,  is  that  hacking  has  come  of  age. 
But  have  corporate  hiring  practices  come  of  age,  too? 
H2K  and  DefCon  had  military  and  professional 

security  people  speaking  to 
the  standing-room-only 
crowds.  Security  guru  Chris 
Goggans  of  Security  Design 
International  announced  a 
serious  flaw  in  Lotus  Notes 
security  in  front  of  panicked 
defense  and  intelligence 
agency  techies.  Former  spy 
Robert  Steele  decried  the 
criminality^  of  incompetent  software  companies  to  a 
cheering  audience.  But  more  telling  was  Department 
of  Defense  Chief  Information  Officer  Art  Money 
telling  the  DefCon  crowd,  “Work  with  us,  not  against 
us.  Join  us.” 

With  technically  skilled  people  in  short  supply, 
firms  are  constantly  seeking  candidates  for  long- 
unfilled  positions.  Yet  company  after  company  has 
told  me  in  no  uncertain  terms,  “We  do  not,  and  never 
will,  hire  hackers.”When  I  press  for  clarification, 
some  will  say,  “What  we  mean  is  that  we  won’t  hire 
anyone  convicted  of  a  computer  crime.”  So  that’s 
what  they  consider  a  hacker?  If  so,  they  haven’t 
learned  anything. 

Say"  you  have  two  equally  qualified  candidates  for 
a  technical  position  of  responsibility  and  accounta¬ 
bility".  One  has  long  hair,  enough  strategically  placed 


metal  piercings  to  put  airport  security  on  alert  and 
wears  all  silver-studded  black  clothes. The  other  is  a 
prim,  well-dressed  young  man.  Whom  will  you  hire? 
How  do  you  know  what  they  are  really  like?  Did  one 
just  clean  up  his  act  yesterday  after  a  friendly  visit 
from  the  Secret  Service  about  hacking  into  the  Fed¬ 
eral  Reserve  Board?  Is  the  visually  disturbing  one  an 
incredibly  ethical  technician  who  helps  out  at  the 
hospice  on  weekends? 

The  question  isn’t  one  of  corporate  dress  policy 
—  a  lot  of  traditional  companies  have  finally  gotten 
over  that.  It’s  how  do  you  choose  who  gets  the  keys 
to  your  corporate  kingdom?  Systems  administrators 
ultimately  have  more  power  than  a  CEO  or  chief 
financial  officer.  They  control  which  insiders  have 
access  to  which  resources  and  who  on  the  outside 
can  remotely  access  the  corporate  goody-bag. They 
can  make  or  break  a  company  that  depends  on  its 
infrastructure  for  revenue,  profits  and  survival. 

While  the  Defense  Department  is  attempting  a 
cooperative  detente  with  the  hacker  community  and 
the  FBI  has  brought  employment  applications  to 
hacker  conventions,  these  agencies  are  going  to  do  a 
fair  amount  of  background  checking  before  putting  a 
hacker  on  the  payroll. 

But  a  criminal  record  only  tells  you  that  a  person 
got  caught  doing  something  illegal:  Not  having  a 
criminal  record  just  means  a  person  has  never  been 
caught.  Most  companies  take  major  risks  by  hiring 
technical  administrators  with  little  or  no  knowledge 
of  whether  that  person  has  committed,  but  not  been 
convicted  of,  hacking-related  crimes. 

An  emerging  technique  to  reduce  the  risk  of  hir¬ 
ing  the  wrong  person  in  sensitive  technical  positions 
is  psychological  profiling.  What  a  profiling  test  does 


is  weigh  the  ethics  and  propensities  for  certain 
behavior  of  people  in  given  situations.  “If  you  find  a 
quarter  on  the  street,  what  will  you  do?”  Keep  it. 
“What  if  it’s  a  $10  bill?”  Keep  it.  “What  if  it’s  a  bag 
with  $250, 000?” Uh  ... 

The  professional  who  practices  psychological  pro¬ 
filing  provides  you  with  insights  into  the  likely 
behavior  of  a  person  who  has  suddenly  been  given 
the  keys  to  your  kingdom.  A  person  who  may  be 
largely  unsupervised,  who  may  be  young  and  not  yet 
well-developed  ethically,  and  who  may  be  faced  with 
internal  and  external  temptations.  Is  money  the  moti¬ 
vating  factor?  What  would  turn  him  into  a  disgrun¬ 
tled  employee,  thus  increasing  the  risk  of  damage? 
What  influences  on  your  critical  and  trusted  systems 
administrators  could  turn  him  against  your  company? 
What  does  he  consider  to  be  minor  infractions,  but 
which  could  have  larger,  damaging  implications  for 
the  company? 

Talk  to  your  human  resources  people.  Get  top 
management  involved.  Talk  to  some  of  the  psycholog¬ 
ical  profiling  professionals  in  your  area  to  see  how  it 
works.  Learn  how  to  massage  the  approach  into  the 
critical  staff  hiring  process  without  being  offensive. 
The  security  implications  need  to  be  understood  by 
management  and  staff  alike. 

It’s  not  so  much  a  matter  of  trusting  your  employ¬ 
ees  as  hiring  people  who  can  become  trusted 
employees.  There  is  a  big  difference. 

Schwartau  is  president  of  Interpact,  a  security 
awareness  consulting  firm,  and  author  of  several 
books,  including  the  recent  CyberShock.  He  is  also 
co-founder  of  NiceKids.Net  He  can  be  reached  at 
winns@gte.  net. 
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\j  a  \J  /  the  CEO  of  the  giant  7-Eleven  convenience 

\J  [J  store  chain  recently  began  using  e-mail  for  high- 
level,  strategic  business  negotiations  with  external 
parties,  he  was  worried  about  security.  His  IT  staff 
was  directed  to  find  a  way  to  protect  the  mail  from 
hijackers  as  it  leaves  the  safe  confines  of  the  LAN  to  travel 
the  treacherous  frontier  of  the  Internet. 


Todd  Cohen  and  Robert  Gray  of  7-Eleven  say  an  e-mail  security 
service  was  a  convenient  choice  for  the  company. 


Instead  of  investing  in  costly  encryption  hardware  or 
software  to  scramble  e-mail,  officials  at  7-Eleven  tapped 
an  e-mail  security  service  provider  to  protect  corporate 
-J  e-mail  from  falling  into  the  wrong  hands.The  company 
is  using  ZixMail.com ’s  ZixIT  service,  which  lets  7-Eleven 
employees  involved  in  sensitive  business  communications 
with  the  outside  world  encrypt  and  digitally7  sign  e-mail  to 
anyone  with  an  e-mail  address  in  one  click. 

7-Eleven  is  among  a  burgeoning  group  of  companies 
turning  to  specialized  service  providers  to  secure  business 
negotiation  details,  legal  documents,  product  blueprints 
and  campaign  proposals  that  are  transmitted  via 
e-mail  over  the  Internet.  Corporations  are  drawn  to  such 
services  because  they  provide  user-friendly  security  with¬ 
out  the  hassles  and  hefty  costs  associated  with  complica¬ 
ted  public-key  infrastructure  (PKI)  alternatives. 

Choosing  ZixIT  was  a  “no-brainer”  because  it  requires 
relatively  little  ongoing  maintenance  work  or  related 
costs,  says  Robert  Gray,  7-Eleven ’s  IS  director  in  Dallas. 
While  the  company  uses  hardware  and  software  encryp¬ 
tion  to  secure  other  applications,  such  as  financial  transac¬ 
tions,  the  technology  was  cost-prohibitive  and  support¬ 
intensive  fore-mail  security,  he  says.  No  secure  e-mail 
product  vendor  could  match  ZixMail’s  price  model  of  $  1 
per  month  per  e-mail  account,  he  adds.  Key  executives  are 
now  using  the  service,  and  the  company  plans  to  intro¬ 
duce  ZixIT  to  500  users  by  year-end.  Ultimately  2,000  of 
7-Eleven ’s  approximately  65,000  employees  will  have 
access  to  the  service. 

ZixIT  also  automatically  compresses  files  so  they  fall 
under  the  size  limit  imposed  by  7-Eleven ’s  firewall,  and  it 
scan  e-mail  and  attachments  for  viruses. 

“That’s  the  magic  bullet  right  there,”  says  Todd  Cohen, 

IS  security  manager  at  7-Eleven.  “With  encrypted  mail,  it 
could  slide  right  by  the  server  unprotected.To  have  auto¬ 
matic  virus  scanning  is  a  big  plus  for  me.” 

ZixMail  and  other  e-mail  security  service  providers, 
including  Certified  Mail.com,  Hush  Communications,  Safe- 
mail  and  ZipLip.com,  are  maneuvering  for  a  niche  in  the 
exploding  e-mail  market.  Most  services  are  quickly  evolving 
to  interoperate  with  popular  e-mail  programs.Typically,  all 
users  need  to  do  is  download  the  service  provider’s  soft¬ 
ware  without  making  any  changes  to  their  e-mail  addresses 
or  computers.To  send  an  encrypted  message,  a  user  clicks 
a  button  and  the  scrambled  message  is  on  its  way. 

In  addition,  several  e-mail  outsourcers,  such  as 
Commtouch,  Critical  Path  and  Mail.com,  include  security 
in  their  offerings. 

Worldwide,  the  number  of  e-mail  boxes  will  grow  from 
570  million  at  the  end  of  1999  to  one  billion  by  2001,  says 
Messaging  Online,  an  e-mail  newsletter.  In  the  U.S.,  the 
number  of  e-mail  boxes  grew  73%  in  1999  to  333  million. 

Despite  this  massive  growth  and  the  availability  of 
encryption  for  the  past  decade,  less  than  1%  of  corporate 
e-mail  is  encrypted,  and  the  secure  e-mail  outsourcing 
niche  totals  $30  million  a  year,  says  Ferris  Research  in  San 
Francisco. That  is  a  minute  portion  of  the  overall  e-mail 
outsourcing  market,  which  Gartner  Group  in  Stamford. 
Conn.,  expects  to  grow  to  $2.5  billion  by  next  year,  with 
40%  of  firms  outsourcing  some  of  their  messaging. 

In  part,  widespread  adoption  of  e-mail  security  has 
been  hampered  by  the  currently  available  hardware  and 
software.  Most  popular  e-mail  packages  offer  built-in  secu¬ 
rity  for  internal  use  within  a  company. To  safeguard  exter¬ 
nal  communications,  users  could  tap  encryption  software 
such  as  Pretty  Good  Privacy  (PGP).  However,  PGP  isn’t  a 
good  option  for  corporate  e-mail  security  because  it 
doesn’t  scale  well,  says  David  Ferris,  research  director  at 
Ferris  Research. 

Another  option  would  be  to  invest  in  a  gateway,  but 
these  products  often  limit  secure  messaging  to  specific 
business  partners  and  cannot  verify7  the  sender’s  identify 
within  a  company. 

PKI,  a  popular  technology7  for  verifying  a  sender's 
identity7  while  encrypting  the  contents  of  an  e-mai>  <■ 
sage,  requires  companies  to  deploy  complex  thgrUi  ■ 
cate  technology7  that  is  difficult  to  manage  vfo.c  7;  T 
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products  can  be  expensive,  with  average  product  costs 
of  $25,000  per  10,000  users.  For  now,  there’s  no  PKI 
standard  that  allows  widespread  interoperability 
between  PKIs  from  various  companies. 

Finally,  e-mail  security  has  often  been  bypassed  for 
higher-visibility  security  technology  such  as  firewalls 
and  intrusion-detection  software  designed  to  protect 
sensitive  data  from  hackers. 

“It’s  still  primarily  thought  of  as  an  internal  support 
application,”  says  Dennis  Gaughan,  senior  analyst  at 
AMR  Research  in  Boston.  “So  why  would  I  need  to 
secure  it?  It’s  important,  but  it  hasn’t  been  raised  to  a 
higher  level  within  an  organization.  Until  you  have  a 
problem  or  an  exposure,  it’s  hard  to  justify.  It’s  very 
much  a  reactive  technology  rather  than  a  proactive 
technology.” 

While  certain  fields,  such  as  law,  advertising  and 
manufacturing,  have  been  spurred  to  secure  e-mail, 
massive  adoption  of  e-mail  security  will  only  evolve 
slowly  as  more  companies  are  burned  by  corporate 
espionage  or  other  events  stemming  from  unprotected 
e-mail,  Gaughan  says. Last  year,  an  Internet  bookseller 
plead  guilty  to  illegally  intercepting  e-mail  from 
Amazon.com  for  commercial  gain.  Publicity  over  such 
security  incidents  is  likely  to  spur  the  market. 

Confidential  correspondence 

Many  of  the  nation's  law  firms  haven’t  needed  to  be 
prodded  to  secure  their  e-mail.  In  one  month  alone  this 
year.  ZixMail  garnered  six  large  law  firm  customers.The 
company  is  counting  on  the  law  firms’  clients,  trading 
partners  and  other  contracts  signing  up  for  the  service 
to  grow  this  initial  customer  base,  says  Doug  Kramp, 
CEO  of  ZixMail. 

“E-mail  is  like  sending  a  postcard  on  the  Internet,” 
Kramp  says.  "It  can  be  read  in  transmission.  It  can  be 
read  when  I  receive  it  by  the  technicians  at  my 
company.” 

\ccording  to  ZixMail  research,  98%  of  corporate 


e-mail  users  want  to  secure  some  portion  of  their 
e-mail.  Despite  this  demand,  awareness  of  e-mail 
security  products  is  low,  he  says. 

ZixMail  markets  the  simplicity  of  its  system  com¬ 
pared  with  internally  operated  PKI  products.  PKI 
involves  the  use  of  two  keys:  one  that  is  publicly  avail¬ 
able  to  everyone,  and  one  that  is  kept  secret  by  the 
user.  Because  public  keys  are  sometimes  difficult  to 
find,  ZixMail  stores  its  customers’  public  keys  on  its 
Web  site,  making  them  accessible  to  anyone  who 
wants  to  send  a  ZixMail  user  a  message.  Private  keys 
used  to  encrypt  outgoing  messages  and  decrypt 
incoming  messages  are  stored  on  the  user’s  desktop. 

Each  ZixMail  user  creates  a  secret  signature  phrase, 
such  as  “I  love  L.A.”When  sending  e-mail,  the  user 
enters  the  signature  phrase  and  the  private  key  digitally 
encrypts  and  signs  the  outgoing  message.To  receive 
the  message,  the  recipient  enters  the  signature  phrase 
to  decrypt  it  with  a  private  key. 

Before  last  August,  the 
ZixMail  service  required 
both  the  sender  and  recipient 
to  use  the  ZixMail  software.  However, 
recipients  can  now  view  a  message 
for  free  via  a  secure  connection  from 
the  ZixMail  Web  page  .  The  service  is 
compatible  with  Microsoft  Exchange, 

Lotus  Notes  and  othere-mail  programs. 

Applica,  Inc.  a  small  appliances 
manufacturer,  employs  ZixMail  to 
encrypt  final  product  blueprints  and 
other  sensitive  information  sent 
between  company  headquarters  in 
Miami  Lakes,  Fla.,  and  a  branch  office 
in  Shelton,  Conn.The  company  is  also 
testing  ZixMail,  which  is  approved  for 
export,  for  use  at  a  manufacturing 
plant  in  China. 

Mark  Wilkinson,  Applica  s  IS  man¬ 


ager,  says  while  securing  e-mail  does  not  provide  a 
high-visibility  payback,  it  does  provide  peace  of  mind 
that  sensitive  e-mail  will  be  protected  against  unautho¬ 
rized  access,  especially  from  corporate  spies. 

“Here’s  something  where  you  don’t  know  you  have 
a  problem,”  he  says.“It’s  not  crashing  your  hard  drive. 
It’s  not  taking  over  your  Web  sites.  It  concerns  me  that 
right  now  somebody  could  have  sophisticated  devices 
looking  at  your  mail  over  the  Internet.This  gave  us  the 
end-to-end,  desktop-to-desktop  security  which  I  think 
is  vital.” 

Because  the  company  is  rapidly  growing,  it  could 
not  afford  to  invest  the  time,  money  or  resources 
needed  to  deploy  an  internal  system  to  secure  mail, 
he  says. 

ZixMail  also  provides  a  time  stamp  to  ensure  that 
messages  are  not  back-dated  or  forward-dated.  In  addi¬ 
tion,  it  provides  a  certified  receipt  that  the  e-mail  has 
been  delivered.This  certified-receipt  feature  was  the 
primary  draw  for  Haynes  and  Boone,  a  technology- 
business  law  firm  with  400  attorneys  in  Dallas.The 
receipt  feature  lets  attorneys  use  the  Zixlt  service 
instead  of  an  overnight  delivery  service,  says  David 
McCombs,  a  partner  with  the  firm. 

“You  could  think  of  it  as  an  electronic  FedEx 
because  we  know  the  person  received  the  e-mail  ” 
McCombs  says.  “We  have  been  able  to  use  it  for  our 
own  records  to  cover  ourselves.  With  FedEx,  you’re 
talking  about  $20,  [and]  you  can  accomplish  the  same 
thing  with  a  few  clicks.” 

CertifiedMail.com  also  offers  an  e-mail  security  serv¬ 
ice  that  protects  e-mail  in  what  company  co-founder 
Bob  Janacek  calls  an  “e-armored  car.” After  a  sender 
composes  a  message  and  hits  a  button  for  it  to  be  sent 
via  CertifiedMail,  the  data  is  written  into  an  XML  file. 
The  message  and  all  of  its  components  are  encrypted 
and  forwarded  to  CertifiedMail’s  servers,  where  it  is 
stored  until  the  recipient  accesses  it  via  a  Web  browser. 
CertifiedMail.com’s  secure  e-mail  service  is  free  for  per¬ 
sonal  use  and  costs  $99  per  year  for  businesses.  As  its 
name  implies,  CertifiedMail  also  provides  notice  to  the 
sender  that  the  mail  has  been  delivered,  and  it  alerts 
the  sender  when  the  mail  has  been  opened. 

“A  hacker  monitoring  a  router  would  see  the  mes¬ 
sage  go  through,  but  it  would  be  encrypted,”  he  says. 
“You  don’t  have  to  coordinate  it  with  the  recipients, 
the  recipients  don’t  have  to  download  special  soft- 
ware.You  have  proof  that  the  document  is  authentic, 
and  you  have  proof  that  the  message  has  been 
opened.” 

Allan  Cowen,  principal  of  Datamex  Technologies,  a 
Mississauga,  Ontario,  IT  security  company,  says  Cert¬ 
ifiedMail.com’s  service  lets  his  company  forge  stronger 
customer  relationships  because  it  ensures  proposals, 
quotations  and  other  customer-  sensitive  information 
are  not  exposed  to  potential  security  vulnerabilities 
over  the  ’Net. 

“Having  the  ability  to  secure, 
track  and  get  legal  verification  of 
receipt  when  sending  important 
and  sensitive  documents  has 
given  us  a  more  professional 
approach  as  we  conduct  business 
and  correspond  with  our  clients,” 
he  says.“Knowing  that  our  e-mails 
have  been  delivered  securely  and 
read  by  the  recipient  eliminates 
the  uncertainty  of  its  delivery  and 
need  to  make  that  all  too  often 
‘Did  you  receive  my  e-mail?’  call.” 

Because  the  service  is  Web- 
based,  traveling  staff  and  remote 
workers  can  log  into  their 
CertifiedMail  accounts  via  a 
browser  or  trigger  a  secure 
e-mail  directly  from  their 
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electronic  FedEx  because  we 
know  the  person  received  the 
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for  our  own  records  to  cover 
ourselves.  With  FedEx,  you're 
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thing  with  a  few  clicks. 


45  Network  World  August  28,  2000  www.nwfusion.com 


CONFERENCE  AND  EXHIBITION 

ATLANTA  Sept.  24-29,  2000 


Connect  uiith 

E-INFRASTRUCTURE 
FOR  E-BUSINESS 


Also  featuring  the 


SUMMIT 


Conference 


In  today's  New  Economy,  your  company  is  only  as  strong  as  its 
e-infrastructure.  Find  innovative  technology,  expertise  and  vision  to  support 
successful  e-business  at  NetWorid+Interop  2000  Atlanta— the  Southeast's 
largest  networking  event. 

Choose  from  700+  hours  of  focused  technical  education  and  evaluate 
cutting-edge  products  from  more  than  500  leading  vendors  and  start-ups. 
You'll  gain  knowledge  you  can  use  immediately  to  advance  your  existing 


Register  online 
for  your 

FREE 

exhibits 

pass. 


enterprise  and  service  provider  professionals  who  are  as  passionate 
king  as  you.  Visionary  keynotes,  test  networks  and  hands-on 
labs  will  show  you  what  is  next  in  the  convergence  of  voice, 
data  and  video. 

Connect  uiith  success  at  the 
definitive  networking,  Internet  and 
telecommunications  event. 


Opening 
Keynote  by 

Carly  Fiorina 

of  HP 


Security, 

Continued  from  page  46 

Microsoft  Outlook  or  Lotus  Notes  client,  he  says. 

Shreddabie  e-mail 

ZipLip.com  in  Mountain  View,  Calif.,  offers  users 
of  its  free  secure  e-mail  service  various  options  for 
securing  mail.  ZipLip  keeps  e-mail  messages, 
encrypts  them  and  puts  them  on  a  secure  server. 
Recipients  receive  a  message  with  instructions  to  go 


to  the  Web  site  to  pick  up  the  message.  Or,  senders 
can  use  a  password  to  decrypt  an  e-mail  to  secure  a 
message. The  user  and  the  sender  can  agree  upon  a 
password  ahead  of  time  via  a  phone  call  or  separate 
e-mail,  or  the  sender  can  send  a  hint  to  the  recipient. 
The  response  to  the  hint  (such  as  “the  name  of  the 
restaurant  where  we  last  met”)  will  decrypt  the 
message. 

“This  allows  someone  to  send  securely  to  a  partic¬ 
ular  destination  without  having  to  worry  about  a  net¬ 
work  administrator  reading  it,”  says  Kon  Leong, 
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ZipLip  CEO  and  president. “It’s  not  that  easy  to  guess 
a  restaurant  name. To  hack  at  100,000  restaurants 
that  can  be  spelled  20  different  ways  is  tedious." 

What’s  more,  ZipLip  provides  the  electronic  equiv¬ 
alent  of  the  office  paper  shredder  by  letting  cus¬ 
tomers  decide  how  long  ZipLip  should  retain  a  copy 
of  e-mail.  Some  customers  choose  to  have  all  e-mails 
shredded,  while  others  choose  to  retain  all  e-mails, 
Leong  says.  ZipLip  has  received  several  court  orders 
requesting  users’  e-mail. 

“It’s  keeping  e-mail  along  the  nature  of  a  phone 
call  —  once  you’ve  said  it,  it’s  gone,” 
he  says. “It  also  is  a  very  neat  answer 
to  a  court  order, ‘We  don’t  have  if 
because  they  can  also  order  you  to 
decrypt  it.” 


Implementation  advice 

Because  secure  e-mail  services  are 
quick  and  easy  to  implement  com¬ 
pared  with  some  PKI  rollouts,  which 
can  take  up  to  a  year,  outsourcing  is  a 
compelling  option  for  the  short  term, 
Ferris  Research’s  Ferris  says. 

However,  services  that  are  working 
well  now  for  small  pilot  groups  may 
not  scale  well  when  companies  decide 
to  offer  them  to  a  large  number  of 
users,  he  says. 

Corporations  need  to  look  at  future 
e-commerce-related  scenarios  and  evalu¬ 
ate  how  secure  e-mail  will  fit  there,  says 
Frank  Prince,  senior  analyst  of  e-business 
infrastructure  at  Forrester  Research. 

For  example,  if  a  firm  plans  on 
communicating  with  a  large  group  of 
trading  partners  using  fairly  simple 
transactions,  an  external  service  would 
make  sense  because  users  could  just  set 
up  an  account. 

However,  if  a  small  group  of  users 
has  a  specialized  set  of  requirements, 
a  company  may  prefer  to  purchase 
in-house  technology  for  specific  appli¬ 
cations,  he  says. 

Certain  companies  may  be  better  suit¬ 
ed  for  secure  e-mail  than  others,  he  says. 
For  example,  a  company  that  does  not 
get  paid  until  a  client  receives  a  specific 
document  could  speed  up  payment 
delivery  by  opting  for  secure  e-mail  as 
opposed  to  overnight  delivery  services 
or  snail  mail. 

“The  idea  of  knowing  that  a  docu¬ 
ment  arrived  in  the  right  place  at  the 
right  time  and  the  recipient  cannot 
deny  that  he  got  it  —  those  are  the  key 
factors,”  Prince  says. 


support  requirements. 

When  your  network  is  this  important, 
you  can’t  afford  to  compromise. 
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Harreld  is  a  freelance  writer  in 
Cary,  N.C.  She  can  be  reached  at 
heather_harreld@mindspring.com. 
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If  you  have  an  enterprise, 
we  have  a  cloakina  device. 


It's  called  the  RedCreek®  ReD  i-Server.  It 
hosts  RedCreek  e-Director,  ReD™,  which 
allows  you  to  create,  distribute,  and  enforce 
security  policies  across  your  entire 
enterprise  -  even  to  teleworkers  -  and  hide 
all  data  in  plain  sight. 

The  lntel®-based  RedCreek  ReD  i-Server  is 
ready  to  run  out-of-the-box  and  sets  up  in 
minutes.  It  highlights  RedCreek's  practical 
leadership,  providing  single-point  configur¬ 
ation  and  distribution  of  security  policies 
across  a  network  of  RedCreek  Ravlin® 


gateways,  which  enforce  policies  PC-to-PC. 

Compare  the  RedCreek  ReD  i-Server's 
instantaneous  and  universal  policy  updates 
to  manual  "moves,  adds,  and  changes." 
RedCreek  delivers  speed  and  performance 
to  any  enterprise.  It's  like  getting  more  power 
to  the  shields.  That's  complete  security! 

The  RedCreek  ReD  i-Server  makes  network 
security  practical,  manageable,  and 
affordable.  For  more  information  boldly  go 
www.redcreek.com. 


www.redcreek.com 
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So,  you  need  to  network  all  your  hardware  manufacturing  plants  with  your  retail  outlets,  streamline  your  production, 


distribution  and  billing  processes,  and  be  able  to  update  your  data  systems  as  fast  as  the  market  changes? 


That’s  your  business. 
Helping  you  do  it  is  ours. 


ATM 


Frame  Relay 


VideoConnect® 


Network  Management 


DSL 

Data  CPE 


Verizon  Data  Solutions.  Flexible.  Scalable.  Complete.  Ones  and  zeros  have  never  been  more 
a  part  of  your  company’s  core  business.  That’s  why  Verizon  Data  Solutions  is  the  perfect  partner 
for  you.  From  network  design  and  development  through  implementation,  we  offer  you  a 
complete  portfolio  of  end-to-end  solutions  featuring  the  latest  broadband  technologies.  And 
as  a  company  ever  expanding  our  experience  and  expertise  in  building  communications 
networks,  no  one  is  better  equipped  to  keep  you  apprised  of  emerging  technologies.  So,  for 
data,  video,  voice  or  a  combination  of  all  three,  Verizon  Data  Solutions  is  ready  to  grow  with 
your  company.  Visit  www.gte.com/datasolutions/net  today  for  more  information  and  to 
register  for  three  complimentary  issues  of  MIT’s  Technology  Review  or  call  1-877-483-7755. 
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This  top  network 


official  at  a  major 


Southeastern  university 


had  to  prevent  a 


distributed  denial-of- 


service  attack  from 


bringing  his  40,000-nodi 


network  to  a  dead  stop. 


lives  to  tell  about  it. 


Editor’s  note:  Due  to  thesensitivity  of  senior  management  to  publicity  about 
network  attacks,  names  and  locations  have  been  changed  to  protect  the 
innocent.  We  will  say  the  event  occurred  at  a  major  Southeastern  research 
university  with  approximately  40,000  active  machines  on  the  network. 


July  20, 2000,  a  Thursday,  began  much 
like  any  other  day  for  us.There  were 
trouble  tickets  to  handle,  minor  prob¬ 
lems  to  fix,  and  new  hardware  to  install.  We 
had  experienced  some  random,  unexplained 
outages  in  the  preceding  weeks,  but  there 
were  no  indications  that  we  were  about  to 
spend  the  next  few  days  suffering  through  a 
massive  distributed  denial-of-service  attack. 

The  first  faint  signs  of  the  impending 
attack  had  whispered  down  the  wires  earlier 
that  morning.  Router  processor  loads  spiked 
as  the  front  edge  of  the  packet  tsunami 
rolled  across  the  network.As  the  storm 
picked  up  momentum,  enterprise-class  Unix 
machines  dropped  their  network  connec¬ 
tions,  e-mail  services  ground  to  a  halt  and 
Web  servers  went  into  fibrillation.  Chaos 
reigned  as  the  swell  of  bogus  packets  threat¬ 
ened  to  overwhelm  our  network  backbone. 

To  save  the  network,  we  had  to  spring 
into  action.The  following  account  describes 
how  we  discovered  the  attack,  identified  the 
machines  being  used  to  perpetrate  the 
attack,  and  what  measures  we  put  in  place  to 
prevent  another  attack. 

Approaching  distributed 
denial-of-service  day 

In  the  weeks  before  the  attack,  some 
strange  outages  had  occurred  across  the 
campus  network.  Systems  that  were  nor¬ 
mally  rock-steady  were  dropping  sessions. 
Packet  loss  approached  30%  on  some 
switches.The  problems  occurred  at  random 


times  and  were  of  varying 
duration. 

Users  were  getting 
annoyed. The  systems  staff 
was  giving  us  the  collec¬ 
tive  evil  eye.  We  were 
pulling  our  hair  out. 

Adding  fuel  to  the  fire,  we 
had  recently  upgraded  the 
section  of  the  network 
where  we  were  having  the 
most  problems  from 
switched  10M  bit/sec 
Ethernet  to  switched  100M 
bit/sec  Ethernet  with  Gigabit 
Ethernet  uplinks. We  were 
naturally  suspicious  of  the 
new  hardware  and  spent  over 
a  week  chasing  ghosts  in  the 
new  electronics  to  no  avail. 


10:15  a.m. 

Our  first  break  in  the  pelt¬ 
ing  distributed  denial-of-service 
storm  came  midmoming.“  Keith,”  one  of 
our  senior  network  engineers,  was  in  the 
main  router  center  when  another  case  of 
packet  loss  and  missed  pings  started  to 
occur.  He  made  an  on-the-spot  decision  to 
start  what  we  fondly  call  “troubleshooting  by 
yanking  cables.” 

While  it  can  be  extremely  effective  in  iso¬ 
lating  a  problem,  this  method  of  trouble¬ 
shooting  is  a  last  resort.  It’s  a  simple  proce¬ 
dure:  When  the  network  begins  to  melt,  start 
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BY  DDOS  SURVIVOR 


A  large  Southeastern 
university  IS  team  fights  off  a  massive 
distributed  denial  of-service  attack  and 


. 


disconnecting  buildings  from  the 
router  until  the  problem  goes  away. 
Congratulations.  You’ve  isolated  at  least 
part  of  the  problem. 

litis  is  an  extreme  technique  and 
should  not  be  undertaken  lightly.  If 
it  doesn’t  work  you’ll  have  a  lot  of 
explaining  to  do.  Fortunately  for  us,  we 
struck  gold.  We  isolated  the  problems  to 
one  section  of  the  network  contained  in 
one  building  on  campus. 

Probing  the  net 

Isolating  the  problems  was  only  the 
first  step  in  what  would  be  a  long 
process.  We  still  had  to  determine  what 
was  going  on  —  at  this  point  we  didn’t 
know  we  were  being  attacked  —  and 
find  out  which  machines  were  respon- 
sible.The  first  swell  had  passed,  but  we 
feared  that  waves  like  this  always  come 
in  sets  of  three. 

Noon 

9  ‘  .3)  As  soon  as  I  received  word 
that  my  staff  had  localized  the 
problems,  I  had  them  deploy  one  of 
our  newly  built  intrusion-detection 
probes  on  the  segment  under  siege. The 
probe  turned  out  to  be  the  key  that 
unlocked  the  puzzle. 

Some  background:We  had  evaluated 
several  commercial  intrusion-detection 
systems  and  found  them  to  be  cumber¬ 
some  and  expensive. We  also  looked  at 
several  network  management  probes 
and  found  that  while  they  provided 
good  information  on  network  utiliza¬ 
tion  and  traffic  trends,  they  weren’t 
really  designed  for  detecting  denial-of- 
service  attacks.  So  we  rolled  our  own. 

We  chose  a  Hewlett-Packard  Pavilion 
6630  for  our  base  platform. The  Pavilion 
6630  has  a  500-MHz  Celeron  processor 
and  came  with  64M  bytes  of  memory. 
We  upgraded  the  memory  to  192M 
bytes,  giving  us  a  large  capture  buffer. 
When  you’re  working  with  data  rates  of 
more  than  100M  bit/sec,  buffer  space 
fills  up  fast.  For  a  network  interface 
card  (NIC),  we  chose  NetGear’s  GA-620 
Gigabit  Ethernet  interface. 

Don’t  scrimp  on  the  network  card;  a 
dime  store  NIC  can  really  bog  down 
the  system.  Remember  that  the  primary 
function  of  this  system  is  to  grab  data 
off  the  network  and  process  it  quickly. 

We  chose  Red  Hat  Linux  6.2  as  the 
base  operating  system  because  it’s  sta¬ 
ble,  fast  and  easily  customizable. 

To  complete  the  package,  we  added 
three  crucial  Linux  applications: 


Fighting  oft  the  distributed  denial-of-service  storm 

A  university  network  team  survives  a  distributed  denial-of-service  attack 
and  lives  to  tell  about  it. 


O  The  attack  begins, 
and  the  Catalyst  is 
overwhelmed  by  bogus 
traffic  on  our  network  at 
this  point. 


©  Simultaneously, 
unexplained  systems  and 
network  outages  occur  on 
our  network  here. 


Q  To  isolate  the  affected 
network  segment,  we 
unplug  this  cable. 


O  To  pinpoint  the  attack, 
we  install  a  network  probe 
on  a  mirrored  port. 


0  As  an  ongoing  safety 
measure,  we  install  a 
permanent,  Linux-based 
intrusion-detection 
system  on  our  primary 
Internet  feed. 


Cisco  12000  Series  Gigabit  Switch  Router 
OC  48  metropolitian  area  network 


Internet  and 
Internet  2 
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Cisco  Catalyst  6509 
Cisco  Catalyst  4006 
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Network  under  attack 


•  Snort,  a  packet/sniffer  logger  and 
lightweight  intrusion-detection  system. 

•  Iptraf,  a  network  monitoring  utility 
for  IP  networks. 

•  Tcpdump,  a  packet  capture  and 
dump  program. 

A  probe  is  useless  unless  it  is  located 
where  it  can  see  all  traffic  on  the  net¬ 
work  segment  being  monitored.  Our 
network  is  completely  switched  — 
each  port  receives  only  those  packets 
destined  for  the  machine  connected  to 
it.  So  how  did  we  put  the  probe  in  the 
middle  of  all  the  activity? 

We  took  advantage  of  the  port-mir¬ 
roring  feature  on  our  Cisco  Catalyst 
6509  switches.  Port  mirroring  lets  you 
configure  one  port  on  a  switch  to  echo 
all  traffic  destined  to,  and  coming  from, 
another  port.  While  port  mirroring  is  an 
incredibly  useful  tool  to  use  in  fending 
off  an  attack,  it  can  consume  significant 
CPU  resources  while  it’s  active. We  only 
use  port  mirroring  when  absolutely 
necessary.  We  use  a  passive  tap  —  an 
optical  probe  or  an  Ethernet  repeater 
—  for  long-term  monitoring.  We  con¬ 
nected  the  probe  to  an  unused  port,  set 


the  port  to  mirror  the  traffic  on  the  seg¬ 
ment  we  wanted  to  watch,  and  we 
were  in  business. 


1  p.m. 

As  soon  as  we  activated  the 
probe,  we  fired  up  Iptraf.  Iptraf 
is  an  excellent  tool  for  getting  a  bird’s 
eye  view  of  what’s  happening  on  your 
network  by  providing  statistics  on 
bandwidth,  packet  size  and  TCP/User 
Datagram  Protocol  (UDP)  port  usage. 
In  this  case,  the  port  statistics  screen 
immediately  alerted  us  that  something 
strange  indeed  was  happening  on  the 
network. 

The  majority  of  traffic  on  a  typical 
network  is  divided  between  the  most 
frequently  used  services: Web,  e-mail, 
FTP  and  Napster.  We  saw  a  completely 
different  picture.  Every  port  below 
1024  was  in  use,  had  equal  byte  and 
packet  counts,  and  the  counts  were 
rapidly  increasing  as  we  watched.  It 
didn’t  take  a  NASA  meteorologist  to 
figure  out  that  the  tidal  wave  was 
about  to  hit. 

While  Iptraf  is  a  fantastic  “what’s 


happening  on  the  network”  tool,  it 
couldn’t  capture  packets  and  analyze 
them.  Once  we  realized  there  were 
some  bizarre  traffic  patterns  on  the  net¬ 
work,  we  knew  we  had  to  get  inside 
the  packets  and  determine  what  was 
happening. 


4:45  p.m. 

To  dig  deeper,  we  called  on 
Snort,  a  free,  open  source  code 
application  written  by  Martin  Roesch, 
director  of  Forensic  Systems  at  Hiver- 
world  in  Berkeley,  Calif.  Snort  is  a 
lightweight  intrusion-detection  sys¬ 
tem,  but  don’t  let  the  term  “light¬ 
weight”  throw  you. This  is  serious 
software  and  is  our  intrusion-detec¬ 
tion  code  of  choice. 

Snort  uses  a  flexible  rules  language 
that  lets  users  describe  what  types  of 
traffic  should  either  be  captured  or 
ignored.  When  a  rule  is  triggered,  Snort 
grabs  the  traffic  and  writes  an  alert  to  a 
log  file. 

In  an  ideal  world,  Snort  would  have 
immediately  detected  that  we  were 
being  attacked.  Unfortunately,  this 
wasn’t  the  case. The  initial  burst  of 
activity  that  led  to  the  isolation  of  the 
problem  only  lasted  20  minutes.  By 
the  time  we  had  the  probe  installed 
and  finished  using  Iptraf,  the  bad  guys 
took  a  break.  The  initial  wave  had  sub¬ 
sided.  But  another  storm  was  brewing. 


3:30  p.m. 

About  two  hours  after  we 
installed  the  probe,  our  pagers 
started  beeping  incessantly. The  black 
hats  were  back,  and  Snort  had  served 
us  well  as  our  early  warning  system. 

With  a  quick  perusal  of  the  Snort 
logs,  we  determined  that  we  had  been 
hit  by  an  attack  known  as  distributed 
denial-of-service  shaft.This  attack  uses  a 
TCP  SYN  flood  technique  to  over¬ 
whelm  the  target  machines.  In  most 
cases,  the  attackers  and  targets  are 
widely  separated.  Not  so  this  time.  Our 
crafty  friends  were  using  hosts  on  the 
same  network  segment  to  attack  each 
other. This  really  posed  a  problem  for 
us.  Confining  the  attack  to  one  IP  sub¬ 
net  made  it  much  harder  for  us  to 
establish  the  identity  of  the  machines 
being  used. 

Most  distributed  denial-of-service 
attacks  use  a  cloaking  method  known 
as  IP  spoofing,  which  scrambles  the  IP 
address  of  the  attacking  host. The 

Continued  on  page  54 


Here  are  some  cheap,  easy  and  effective  steps  to  keep  your  network  safe: 

«  Build  an  intrusion-detection  system.  I  politics  stop  you.  Get  to  know  the  administrators  and 

Our  system  was  cheap:  We  spent  less  than  SI ,000  for  j  make  sure  they're  aware  of  the  dangers.  A  tightly 
the  CPU,  the  gigabit  network  interface  card  and  the  j  secured  system  doesn't  make  an  attractive  playground 

extra  memory.  The  operating  system  was  free,  and  we  j  for  the  script  kiddies. 

had  the  optical  splitter  left  over  from  a  previous  project  j  •  Constantly  emphasize  the  need  for  funding  for  secu- 

—  you  can  expect  to  pay  around  $500  for  this  type  of  j  rity  hardware,  software  and  training, 

tool.  Comparable  commercial  systems  can  cost  $20,000  j  Don't  wait  until  you've  been  victimized  to  ask  for 
add  can  be  extremely  complex  to  install  and  administer,  j  funding  to  obtain  security  hardware,  software  or  train- 

*  Get  on  good  terms  with  your  system  administrators,  j  ing.  Tell  your  boss  every  chance  you  get  just  how  bad  it 

In  many  organizations  the  network  team  and  the  sys-  :  is  out  there.  You  might  not  get  funding,  but  when  you  get 

tern  administrators  fall  under  different  groups.  Don't  let  :  hit  —  and  you  will  —  you’ll  be  on  record  as  having 


been  proactive.  v — 

•  Read,  read,  read. 

You  have  a  full-time  job.  The  script  kiddies  don't.  To 
stay  ahead  of  them  will  require  a  lot  of  work.  Read 
everything  about  security  and  intrusion  detection  you 
can.  Subscribe  to  Bugtraq,  and  visit  the  Whitehats.com 
Web  site.  Download  some  of  the  distributed  denial-of- 
service  programs  and  play  with  them.  Just  do  it  offline 
—  don't  attack  your  own  network. 
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Raise  your  awareness  about  data  protection. 


e  leading  solution  for  desktop  to  data  center  data  protection  -  VERITAS  NetBackup". 


When  you  realize  your  business  critical  data  must  be  protected,  discover  VERITAS  NetBackup".  As  the  leader  for  backup  and  recovery  solutions, 
VERITAS,  The  Data  Availability  Company",  offers  data  protection  from  the  desktop  to  the  data  center.  With  VERITAS  NetBackup"'  DataCenter  for  data 
protection  for  large  operating  environments  in  the  corporate  data  center,  with  VERITAS  NetBackup  BusinesServer"  for  heterogeneous  branch  office 
data  orotection,  and  with  VERITAS  NetBackup  Professional  for  the  protection  of  desktops  and  mobile  laptops  -  there  is  only  one  name  you  need  to 
remember:  VERITAS  NetBackup,  fully  scalable  to  your  backup  needs. 
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ibout  the  product  that  rede 


VERITAS 
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protection,  visit  our  website  at  www.veritas.com/netbackup.}  /jjic 


VISION2000 

Register  today  for  VERITAS  VISION”  2000 
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Continued  from  page  52 

attacker  doesn’t  need  to  get  data  back 
from  the  systems  it’s  pounding  on,  so 
having  a  bogus  return  address  isn’t  a 
problem  —  for  the  attacker.  But  it 
was  a  problem  for  us  because  there 
were  more  than  300  machines  on 
that  network  segment,  and  we  didn’t 
have  a  clue  about  which  hosts  had 
been  compromised. 

Snort  came  to  our  rescue.  Using  the 


software  to  replay  network  activity 
from  a  captured  file,  we  determined 
that  the  rogue  machines  on  our  net¬ 
work  were  set  in  motion  by  a  control¬ 
ling  host  in  Europe.  Further  analysis  of 
the  packet  dump  turned  up  at  least 
three  local  Unix  machines  involved  in 
the  attack. 


4:45  p.m. 

The  first  step  we  took  to 
block  the  bad  boys  was  to  put 


ingress/egress  filters  on  our  Internet 
router.  Script  kiddies  that  run  denial-of- 
service  attacks  usually  have  more  than 
one  host  they  can  use  to  control  an 
attack,  so  we  didn’t  hold  much  hope 
for  keeping  them  out  for  long,  but  we 
got  lucky.  As  soon  as  the  blocks  went 
in,  the  attacks  ended. 

We  were  still  left  with  the  daunting 
task  of  determining  if  there  were  more, 
as  yet  unknown,  machines  primed  and 
ready  to  be  used  in  another  attack.  We 


The  latest  event  in  Network  Worlds 
industry-renowned  "State  of  the  LAN"  series. 

Discover  how  to  keep  your  network  on  track  by  learning  how  to 
implement  the  NEW  best  practices  for  managing  and  extending 
your  LAN.  Don't  miss  out  on  this  unique  mix  of  tutorial,  product 
overview  and  strategy  discussion  delivered  by  top  industry 
experts.  Explore  solutions  for  today's  critical  LAN  issues,  including: 

New  Best  Practices  in  LAN  Networking: 
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Network  Management: 
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And  much  more... 
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contacted  the  interim  systems 
administrator  of  the  machines  that  had 
been  hacked  (the  department  was 
between  system  administrators  and 
had  someone  filling  in)  and  secured 
permission  to  scan  the  network  for 
infected  machines. 

While  our  university  security  person 
was  working  with  the  interim  systems 
administrator  to  scan  the  network  seg¬ 
ment  for  further  infection,  several  of 
our  network  engineers  were  feverishly 
working  to  put  in  place  another  probe 
on  our  primary  Internet  and  Internet2 
feed.  We  knew  the  hackers  would  initi¬ 
ate  another  wave  of  bogus  distributed 
denial-of-service  requests,  and  this  time 
we’d  be  ready. 

Noise,  noise,  noise 

Our  primary  off-campus  link  is  a 
Gigabit  Ethernet  connection  between 
a  Cisco  Catalyst  6509  box  and  a  Cisco 
12000  Series  Gigabit  Switch  Router 
machine. Tapping  into  that  link  would 
require  some  specialized  equipment. 
We  used  a  Shomiti  Systems  optical 
splitter  to  peel  off  a  portion  of  the 
light  stream  and  direct  it  to  the  probe. 
Using  a  passive  tap  (the  optical  split¬ 
ter)  instead  of  an  active  tap  (mirror 
ports)  eliminated  the  possibility  of 
overloading  the  router  by  forcing  it  to 
duplicate  packets  during  periods  of 
intense  network  activity. 

8:20  p.m. 

Our  first  discovery  after 
activating  the  new  probe  was 
that  the  supplied  rules  file  for  Snort 
generated  a  tremendous  amount  of 
false  alarms  when  used  on  the 
primary  network  connection.  Intrusion 
detection  is  definitely  an  art,  not  a  sci¬ 
ence,  and  adjusting  the  filters  can  be  a 
complex  and  ongoing  task.We  spent 
several  days  fine-tuning  the  rules  until 
we  struck  a  balance  between  signal  and 
noise.Too  loose  a  filter,  and  you’ll  be 
buried  under  false  alarms.Too  tight, 
and  you’ll  miss  important  information. 

The  aftermath 

The  good  news  for  us  was  that  the 
scan  of  the  infected  network  didn’t 
turn  up  any  more  contaminated  hosts. 
The  router  filter  appears  to  be  keeping 
the  bad  guys  at  bay.  We  opted  not  to 
pursue  the  hackers  because  we  were 
faced  with  the  reality  that  these  guys 
typically  operate  30  levels  deep,  and 
because  we  sustained  no  lasting  dam¬ 
age  to  our  network  we  felt  tracking 
them  down  was  not  worth  the  time 
and  effort. 

Life  is  returning  to  normal.  We  feel 
safer  with  a  round-the-clock  intrusion- 
detection  system  watching  our  Internet 
feed,  but  we  know  that  it’s  only  a  mat¬ 
ter  of  time  before  another  set  of 
machines,  on  another  segment  of  the 
network,  stir  in  the  middle  of  the  night, 
call  quietly  to  one  another,  and  leap  to 
the  attack  like  sharks. 

You’re  not  paranoid.They  are  out  to 
get  you. You  can  go  back  into  the  water 
—  just  make  sure  you  have  your  life 
preservers  are  within  arm’s  reach.  B 
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laptop  tools  to 
stay  in  sync 

Mobility's  Network/ Unplugged  can  keep 
your  road  warriors  up  to  date. 

BY  MIKE 


our  sales  staff  is  hitting 
the  pavement,  but  if  the 
data  they  have  on  their 
laptops  is  out  of  date, 
they’re  walking  time 
bombs.  With  the  wrong  information, 
they  may  not  be  able  to  close  a  deal, 
or  worse  yet,  they  may  close  a  deal 
at  the  wrong  price.  To  prevent  that 
you  need  to  make  sure  your  staff  has 
the  right  data  on  their  laptops  by  let¬ 
ting  them  synchronize  data  easily. 

We  tested  three  packages  that  syn¬ 
chronize  data  with  laptop  computers: 
Mobiliti’s  Network/Unplugged; 
Software  Pursuits’  SureSync;  and 
Synchrologic’s  iMobile  Suite.  We 
wanted  to  look  at  Symantec’s  Mobile 
Update,  but  the  company  has  discon¬ 
tinued  that  product.  In  addition  to 
laptop  synchronization,  SureSync  and 
iMobile  Suite  can  handle  server-to- 
server  synchronization.  IMobile  Suite 
can  also  handle  server-to-PDA  and 
database  synchronization.  However, 
because  our  testing  focused  on  lap¬ 
top  synchronization,  we  did  not  eval¬ 
uate  those  functions  in  this  test. 

Mobiliti’s  Network/Unplugged 
wins  our  Blue  Ribbon  Award  as 
our  hands-down  favorite.  It’s 
administration  features,  easy  instal¬ 
lation  and  general  ease-of-use 
make  it  the  top  product. 

"Is  that  all  it  does?" 

When  we  first  looked  at  the 
manual  for  Mobiliti’s  Network/ 
Unplugged,  we  weren’t  impressed. 
“Is  that  all  it  does?”  was  our  shoot- 

from- 


hip  response.  But  when  we  looked 
more  closely,  we  found  Mobiliti’s 
slogan,  “Take  the  network  with 
you”  was  apt,  and  we  grew  to  like 
the  product. 

We  favored  Network/Unplugged 
because  it  works  the  way  we  as 
network  managers  think  —  we  pre¬ 
fer  to  have  everything  of  impor¬ 
tance  on  the  network  servers  and 
not  on  users’  PCs.  We  realize  this 
manner  of  thinking  doesn’t  always 
work  for  laptops.  Network/ 
Unplugged  let  us  use  the  same 
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drive  mappings  we  enjoy  when 
we’re  connected  to  the  network. 

Network/Unplugged  makes  an 
image  (Mobiliti  calls  it  a  project)  of 
the  portions  of  your  network  servers 
you  want  to  have  available  when 
you’re  not  on  the  network.  Network/ 
Unplugged  fakes  out  the  PC’s  operat¬ 
ing  system  into  Blinking  the  network 
resources  are  still  available  with  the 
same  drive  mappings.  Network/ 
Unplugged  is  NOS-independent  —  if 
you  can  map  to  the  resource, 
Network/Unplugged  can  fake  the 
mapping  in  stand-alone  mode. 

This  is  a  very  simple  and  intuitive 
approach  for  users.  For  example,  if 
Joe  Salesman  left  a  memo  on  the  H 
drive  in  the  office,  it  will  be  on  the  H 
drive  (on  his  laptop)  when  he’s  in 
the  field.  The  intent  is  for  users  to 
create  their  own  synchronization  pro¬ 
jects  for  themselves,  with  the  under¬ 
standing  that  users  know  what  data 
they  need  better  than  the  system 
manager,  and  there  is  no  reason  to 
make  the  user  ask  the  system  man¬ 
ager  to  provide  data.  This  approach 
frees  a  system  manager  from  being 
responsible  for  every  change  every 
user  wants  to  make  to  his  laptop. 

On  the  other  side  of  that  coin  is 
Network/Unplugged’s  lack  of  cen¬ 
tralized  control.  This  product  lacks 
tools  that  would  let  the  system  man¬ 
ager  set  up,  change  and  enforce 
projects  for  end  users.  At  a  smaller 
company,  things  tend  to  be  self-cor¬ 
recting:  Salespeople  or  technicians 
who  don’t  have  the  information  they 
need  while  on  the  road  will  update 
their  projects  the  next  time  they  are 
in  the  office.  This  sort  of  laissez-faire 
approach  makes  system  managers  at 


Network/Unplugged  2.0b 

RATING:  7.60  Mill 

COMPANY:  Mobiliti 
(732)  603-8592, 
www.mobiliti.com. 

COST:  $395  for 
server  license,  $99 
per  user,  volume 
discounts  available.  PROS:  Easy 
to  install;  easy  to  use;  minimum 
management  required;  good 
deployment  tools  provided. 
CONS:  No  centralized 
management. 


SureSync  3.17 


RATING:  6.95  COMPANY:  Software  Pursuits  (650)  372-0900, 
www.software-pursuits.com.  COST:  $1 ,200  for  a  two-server 
license;  $4,800  fora  10-server  license;  $69  for  a  one-node 
licence;  $660  for  a  1 0-node  license.  PROS:  A  rich  set  of 
synchronization  options.  CONS:  Remote  laptops  were  unable 
to  use  the  client/server  version  of  the  software,  which  made 
some  features,  such  as  multiway  synchronizations,  impossible. 

iMobile  Suite  2.51 

RATING:  5.75  COMPANY:  Synchrologic  (888)  345-7692, 
www.synchrologic.com.  COST:  $149  per  user  for  100  seats, 
not  including  database  synchronization  functions;  $449  per  user 
if  database  synchronization  software  is  included.  PROS: 
Supports  data  synchronization  to  all  parts  of  the  known  universe. 
CONS:  Installation  is  a  bear. 


Administration  Ease  of  use  Performance  Installation  Documentation  Price  Total 

30%  30%  15%  10%  5%  10%  score 
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Individual  category  scores  are  based  on  a  scale  of  1  to  10  Percentages  are  the  weight  given  each  category  in  determining  the  total 


larger  companies  break  out  in  a  cold 
sweat.  All  of  this  left  us  in  a  quan¬ 
dary  about  scoring  Network/ 
Unplugged’s  administration.  Because 
there  is  no  real  administration,  it’s 
very  easy  to  administer,  which  is 
good.  On  the  other  hand,  there 
aren’t  tools  in  the  package  to  handle 
administration,  which  suggests  the 
score  should  be  low.  But  we  gave  it 
a  7  because  we  were  happier  with 
the  easier  approach. 

We  encountered  one  surprise  dur¬ 
ing  the  testing  of  this  product.  We 
wanted  to  synchronize  our  network- 
based  e-mail  system  onto  our  laptops 
and  use  the  same  package,  config¬ 
ured  the  same  way,  in  both  the  office 
and  the  field.  The  data  synchronized 
beautifully,  but  the  e-mail  package 
refused  to  am.  While  Network/ 
Unplugged  will  mimic  networked 
data,  it  can’t  mimic  network  calls. 
When  the  e-mail  package  tried  to  use 


MobiHti  NervvofkWorld 

Network/Unplugged 

Our  hands-down  favorite 
for  best  laptop  file  synch¬ 
ronization  program.  While  it  has  some 
rough  edges,  its  administration 
features,  easy  installation  and  general 
ease-of-use  make  it  the  top  product. 


a  NetWare  system  call  to  find  out  if 
we  were  logged  on,  it  found  that  we 
weren’t  connected  to  the  network. 

We  feel  this  isn’t  an  onerous  restric¬ 
tion  because  you  would  be  better  off 
using  the  Post  Office  Protocol  3  or 
Internet  Message  Access  Protocol 
configuration  of  the  e-mail  package 
when  your  users  are  on  die  road 
anyway.  To  put  this  issue  in  perspec¬ 
tive,  we  used  word  processing  and 
spreadsheets,  and  ran  our  usual 
Office  programs  with  no  problems. 

We  were  impressed  by  the  speed 
of  installation,  which  took  less  than 
10  minutes.  However,  we  were  a  bit 
confused  about  whether  to  install  a 
server.  While  the  box  said  we  didn’t 
need  a  server,  the  manual  told  us 
how  to  install  it.  A  deeper  look  at 
the  manual  told  us  that  the  Network/ 
Unplugged  server  gives  dial-up  users 
better  performance  by  speeding  the 
scan  of  the  remote  machine,  com¬ 
pressing  the  data  to  be  synchronized 
and  allowing  only  changed  data  to 
be  sent  to  users. 

We  installed  the  server  software  on 
our  Windows  NT  4.0  server  and 
found  it  worked  smoothly.  However, 
we  did  have  some  configuration 
issues  in  having  the  Mobiliti 
Network/Unplugged  server  synchro¬ 
nize  to  a  NetWare  server  to  the  lap- 
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top.  The  issues  were  largely  how  to 
handle  drive  mappings  because  the 
NT  server  saw  the  NetWare  drives 
differently  than  the  end  users  did 
when  they  logged  on  to  the  NetWare 
server  directly.  We  think  this  would 
be  an  issue  in  any  multiserver  envi¬ 
ronment,  not  just  a  NetWare  shop. 

Once  Network/Unplugged  was 
installed  on  our  laptop,  we  selected 
which  network  directories  we  wanted 
and  it  synchronized  them.  When  we 
shut  down  our  laptops  while  con¬ 
nected  to  the  LAN,  we  were  asked  if 
we  wanted  to  do  a  final  synchroniza¬ 
tion.  When  we  turned  our  laptops  on 
while  connected  to  the  LAN,  we 
were  again  given  an  opportunity  to 
synchronize  the  laptops  to  the  LAN. 
The  synchronizations  generally 
worked  very  well. 

While  installation  ran  smoothly, 
several  times  we  received  error  mes- 
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Throughout  a  synchronization  run,  Mobiliti's  Network/ 
Unplugged  client  keeps  the  user  informed  about  what 
it's  doing,  as  well  as  its  progress  in  most  operations. 


Sync  options  galore 

Software  Pursuits’ 
SureSync  is  powerful  soft¬ 
ware  that  synchronizes 
files  across  WAN  and  LAN 
links,  coordinates  file 
updates  between  multiple 
users,  ensures  consistency 
of  critical  data  and  facili¬ 
tates  software  distribution. 

Additionally,  SureSync 
RealTime  is  an  extension 
of  SureSync  that  adds  a 
critical  timing  element  that 
schedules  synchroniza¬ 
tion,  distributes  changes 
instantly  and  syncs  large 
volumes  of  files  quickly. 


How  We  Did  It 

Because  data  synchronization  is  a  fairly  new  program  area,  there  isn't 
much  commonality  regarding  the  programs  we  tested.  Mobiliti's  Network/ 
Unplugged  attempts  to  duplicate  the  network  environment,  letting  the  end 
user  decide  what  data  will  be  synchronized.  It  works  hard  to  make  the 
process  easy  for  the  user  and  transparent  for  the  software  that  uses  the  data 
being  synchronized.  Software  Pursuits'  SureSync  is  a  manager-operated 
product,  that  offers  many  —  often  confusing  —  software  synchronization 
options,  but  which  lets  the  system  manager  synchronize  data  across  a  num¬ 
ber  of  machines.  Then  there's  Synchrologic's  iMobile  Suite,  a  complex,  top- 
heavy,  database-driven  product. 

Given  the  differences  in  products,  we  installed  the  products  on  our  test 
LAN  servers  and  our  desktop  machines  for  initial  testing.  Once  we  were 
comfortable  with  the  products,  we  installed  them  on  our  laptops  and  used 
them  as  the  vendors  intended  to  synchronize  data.  We  considered  ease  of 
use  and  operating  system  interoperability.  We  planned  on  looking  at  reliabil¬ 
ity,  but  all  the  packages  worked  as  designed  and  reliability  wasn't  an  issue. 

We  used  a  nine-node  test  LAN  that  consisted  of  a  NetWare  4.1 1  server,  a 
Windows  NT  4.0  server,  a  FreeBSD  Unix  server  and  a  variety  of  Windows  95 
and  98  PCs.  We  also  used  a  laptop  to  test  data  synchronization  over  a  dial¬ 
up  link. 

After  we  installed  each  product  twice,  we  rolled  back  the  machines  we 
used  to  a  clean  state  using  PowerQuest's  Drivelmage  Pro  and  reinstalled  the 
software,  timing  how  long  it  took  us  to  complete  that  process.  The  only  prod¬ 
uct  that  was  considerably  difficult  to  install  was  Synchrologic's  iMobile  Suite. 


SureSync  gives  the  system  manager  great  control  over  the 
synchronization  process.  Here  the  wizard  is  allowing  us  to 
adjust  the  synchronization's  priority. 


system  manager 
can  define  a  one¬ 
way  synchronization,  in  which  data 
flows  from  the  source  to  the  desti¬ 
nations,  or  a  two-way  synchroniza¬ 
tion,  in  which  data  flows  from  any 
root  to  another. 

SureSync  has  a  rich,  almost  over¬ 
whelming,  set  of  file  synchronization 
options.  We  wished  they  were  better 
named  so  the  meaning  of  the  choic¬ 
es  would  be  more  obvious.  They 
include  Mirror,  Multimirror,  Exchang¬ 
ing  Copies,  Recent  Master  Copy, 
Differing  Master  Copy,  Forced  Master 
Copy  or  Move  synchronization.  Move 
is  the  most  obvious  choice.  It’s  a 
one-way  synchronization,  and  when 
the  synchronization  is  complete,  the 
source  file  is  deleted.  This  clears  out 
clutter  and  lets  the  system  manager 
know  when  it’s  completed. 

For  laptop  synchronization,  the 
option  we  used  was  Exchanging 
Copies,  which  copies  files  from  any 
synchronization  server  to  another 
synchronization  server.  But  unlike 
Network/Unplugged,  SureSync  won’t 
delete  files  on  other  roots  when  it  is 
deleted  from  one  of  them.  This  can 
be  a  problem  for  applications  that 
use  many  temporary  files,  such  as 
e-mail  applications  —  it’s  annoying 
when  an  e-mail  you  thought  you’d 
deleted  comes  back  to  haunt  you. 

Realizing  that  the  options  can  be 
complex.  Software  Pursuits  offers  a 
preview  function  that  examines  the 
relation  and  shows  you  what  files  will 
be  affected  —  and  how  —  by  the 
relation.  Once  you  are  happy  with 
the  relations,  you  can  trigger  them 
manually  or  use  the  scheduler  to  set 
up  times  when  they  will  be  mn. 

SureSync’s  scheduling  abilities  are 
very  useful  in  server-to-server  syn¬ 
chronizations  or  server-to-worksta- 
tion  synchronizations  over  a  LAN. 
Because  it  is  difficult  to  predict 


many  LAN-based  data  movement 
tasks  with  good  results.  But  when 
we  detached  the  laptop  from  the 
LAN  and  dialed  in,  things  didn’t 
work  as  we  expected.  Our  client 
software  couldn’t  connect  to  the 
server  software.  We  called  Software 
Pursuits  and  asked  for  help.  We  were 
told  the  client-only  version  of  the 
software  was  better  suited  for  laptop 
synchronization.  As  a  bonus,  it’s  also 
less  expensive.  Following  Software 
Pursuits’  suggestion,  we  uninstalled 
the  client/server  version  and  installed 
the  client-only  version.  The  client- 
only  version  had  the  same  control 
interface  and  handled  the  same  as 
the  client/server  version,  but  this 
time  we  could  synchronize  between 
the  server  and  remote  laptop. 

SureSync  was  very  easy  to  install, 
but  the  configuration  was  a  bit  more 
complex  than  that  of  Mobiliti’s  Net¬ 
work/Unplugged.  One  minor  issue 
was  the  fact  that  to  use  SureSync  over 
a  WAN  link,  you  needed  to  install 
Distributed  Component  Object  Model 
(DCOM)  extensions  to  Windows. 
However,  Microsoft  did  not  include 
some  of  the  DCOM  components  on 
the  Windows  98  Second  Edition  CD, 
which  made  getting  DCOM  to  work  a 
bit  more  difficult.  While  annoying,  this 
is  as  big  a  problem  for  Software 
Pursuits  as  it  was  for  us. 

Overall,  we  liked  SureSync,  but 
we  believe  it  was  at  once  more  — 
and  less  —  than  we  needed  to  syn¬ 
chronize  laptops  to  the  network. 
Shops  that  need  to  synchronize  from 
server  to  server  or  perform  multiway 
synchronization  would  find  SureSync 
a  good  fit  for  their  needs. 

Major  league  syncing  options 

Synchrologic’s  iMobile  Suite  is 

See  Review,  page  60 


sages  at  the  end  of  a  syn¬ 
chronization  process.  Once,  we 
were  told  die  synchronization  failed 
and  some  files  could  not  be  synchro¬ 
nized.  Looking  closer,  we  discovered 
that  some  files  on  the  master  server 
were  deleted  during  die  synchroniza¬ 
tion  mn.  It  would  have  been  better  if 
die  software  had  let  die  matter  slide 
and  not  issued  an  alert  —  most  of  the 
alert  messages  were  more  appropriate 
for  developers  than  for  end  users. 

Finally,  a  matter  of  concern  to  any 
system  manager  is  deploying  a  new 
package.  We  found  a  deployment  kit 
on  Mobiliti’s  home  page  and  a  man¬ 
ual  in  PDF  format  that  explains  how 
to  access  and  use  the  hidden  deploy¬ 
ment  menu  in  Network/Unplugged. 

Despite  some  rough  edges, 
Network/Unplugged  did  the  job  for 
us  easily  and  well. 


SureSync  Relation  Wizard 


Given  our  interest  in 
synchronizing  data  on  remote  lap¬ 
tops  and  the  difficulty  in  ensuring 
that  remote  laptops  would  be  con¬ 
nected  when  synchronizations  were 
scheduled,  we  concentrated  on 
SureSync  and  didn’t  test  SureSync 
RealTime. 

SureSync’s 
architecture  is 
more  complex 
than  Network/ 

Unplugged. 

SureSync’s  syn¬ 
chronizations  are 
governed  by 
what  the  company 
calls  relations,  in 
which  the  system 
manager  defines 
the  roots  of  the 
data  to  be  syn¬ 
chronized.  The 


when  a  laptop  will  be  connected  to 
a  phone  line  or  LAN,  the  scheduling 
options  were  not  useful  for  our  lap¬ 
top  synchronizations. 

We  used  SureSync’s  client/server 
edition  to  schedule  data  synchroniza¬ 
tions  across  LANs,  and  it  handled 


File  retry  attempts  F~D 

Time  between  refries  j 0:00: 30  -jj  (hrs: mins: secs) 


("*  Run  Relation  only  on  Windows  NT 
p  Use  CRC  to  vaidate  open  file  copies 
f”  Synchronize  only  4  top  level  subfolder  exists 


Synchronization  priority: 
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High 

Low 

Normal 
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hard  —  hard  to  install,  hard  to  con¬ 
figure  and  hard  to  manage.  But  once 
in  place,  it  has  its  charms. 

Synchrologic  addresses  a  range  of 
data  synchronization  chores  in  this 
package.  It  lets  you  synchronize  tons 
of  data  such  as  SQL  and  Oracle 
databases,  server-to-server,  server-to- 
desktop  and  server-to-PDA  devices. 

It  also  handles  software  distribution 
and  performs  backups  and  restores. 

The  iMobile  Suite  uses  Microsoft 
Management  Console  (MMC)  as  its 
control  console.  Using  the  console, 
we  created  users  and  groups.  The 
iMobile  Suite  publishes  information, 
such  as  data  to  be  kept  in  synchro¬ 
nization,  or  software  to  be  distributed 
or  updated.  The  data  to  be  published 
is  set  up  through  MMC  as  well.  Once 
the  data  is  published,  the  groups  or 
users  can  subscribe  to  it.  The  system 
manger  can  make  the  data  mandatory 
or  optional,  which  allows  a  good 
level  of  control,  assuring  the  system 
manager  that  essential  updates  will 
take  place,  while  allowing  users  to 
defer  updates  to  convenient  times. 

The  user  and  group  databases 
can  be  created  from  the  keyboard, 
imported  from  data  files  or  imported 
from  the  NT  server.  It  seemed  odd 
that  we  could  import  users  from  the 
NT  domain,  but  not  their  passwords, 
which  forced  us  to  create  duplicate 
user  and  password  combinations  on 
the  product’s  database.  The  docu¬ 
mentation  didn’t  hint  as  to  what 
iMobile  would  do  with  Active 
Directory,  but  we  hope  the  dupli¬ 
cate  user  list  will  be  eliminated. 

We  started  with  some  work-in¬ 
progress  files,  pointing  the  server  to 


them  and  telling  it  to  let 
the  MIS  group  access  those  files. 

Once  you  select  data  to  be  pub¬ 
lished,  iMobile  Suite’s  scanner  com¬ 
presses  the  data,  puts  it  into  the  data¬ 
base  and  makes  it  available.  You  can 
run  the  scanner  manually  or  use  the 
scheduler  included  with  the  NT 
Options  Pack.  Scheduling  the  scanner 
to  run  periodically  ensures  that  the 
data  remains  as  up-to-date  as  possi¬ 
ble.  Neither  Network/Unplugged  nor 
SureSync  needed  a  scanner  to  keep 
data  current  because  they  use  live 
data.  Scanning  the  first  set  of  files 
took  just  a  few  minutes. 

We  started  the  client  software  and 
pulled  the  files  down.  The  operation 
was  smooth.  We  then  tried  to  transfer 
a  larger  file,  a  380M-byte  image. 
Scanning  and  packaging  the  file  took 
about  15  minutes.  Despite  the  large 
size  of  the  file,  we  felt  it  was  unusual 
that  it  took  that  long.  Next  we  used 
the  client  software  to  fetch  the  file  on 
the  LAN.  We  were  surprised  when 
our  test  PC  ran  out  of  disk  space.  We 
had  checked  and  knew  it  had  more 
than  700M  bytes  of  free  space.  We 
deleted  some  files  and  continued  the 
process.  We  found  that  iMobile  had 
downloaded  the  compressed  file 
from  the  server,  and  then  had  the 
client  PC  expand  it.  The  additional 
storage  requirement  used  up  the  PCs 
storage  space.  The  amount  of  addi¬ 
tional  storage  space  required  varies 
depending  on  the  type  of  data  you 
are  synchronizing.  If  it  is  largely  plain 
text,  there  will  be  little  additional 
overhead.  If  the  data  is  already  com¬ 
pressed,  the  storage  requirements  on 
your  laptop  could  double.  It  seems 
odd  that  iMobile  Suite  would  create  a 
temporary  file  —  going  directly  to 
the  final  file  makes  a  lot  more  sense 


DIAL-UP  BLUES 


A  recurring  problem  that  affected  each  product  was  configuring  and 
reconfiguring  laptops  to  make  them  connect  via  the  LAN  or  via  dial-up 
over  the  Internet.  When  the  laptop  was  cabled  via  Fast  Ethernet  to  the 
LAN,  the  laptop  tried  to  dial  out.  When  we  had  the  laptop  dial  out,  it 
couldn't  find  the  Domain  Name  System  server  on  our  LAN. 

We  found  success  with  Microsoft's  WINIPCFG  program,  which  let  us 
clear  and  restore  the  IP  settings.  It  was  brought  to  our  attention  that 
Symantec's  Mobile  Essentials  program  and  3Com's  Dynamic  Access 
Mobile  Connection  Manager  can  deal  with  these  issues.  Sadly,  we  didn’t 
find  out  about  these  products  soon  enough  to  test  them. 

We  used  the  Windows  95/98  WINIPCFG  program  to  release  the  LAN 
settings.  We  then  used  the  Dial-Up  Networking  tool  to  manually  establish 
our  connection  to  our  ISP  and  network,  and  then  invoked  the  synchroniza¬ 
tion  software.  Attempts  to  use  any  of  the  synchronization  products  to 
directly  establish  the  dial-up  connection  were  doomed  to  fail.  If  you  use 
connectivity  options  other  than  dial-up  networking  to  the  Internet,  such  as 
DSL  or  a  cable  modem  connection,  your  results  may  differ. 

—  Mike  Avery 
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because  it  is  faster  and 
wouldn’t  waste  disk  space.  In  this 
day  of  27G-byte  drives  for  PCs,  run¬ 
ning  out  of  disk  space  isn’t  a  major 
issue,  but  it  does  happen. 

We  liked  the  option  of  sending  a 
message-of-the-day  to  the  user  com¬ 
munity.  The  only  concern  is  that  this 
message  is  the  last  thing  fetched 
from  the  host  system.  It  would  be 
better  if  it  were  fetched  first  and  dis¬ 
played  at  once  to  let  the  system 
manager  send  messages  to  the  user 
community  about 
the  data  and  soft¬ 
ware  waiting  to 
be  sent. 

Installation  of 
the  suite  was  dif¬ 
ficult.  We  started 
with  no  manual 
and  a  CD.  The 
CD  had  a  number 
of  cryptically 
named  subdirec¬ 
tories.  We  poked 
around  until  we 
found  the  data 
synchronization 
program.  As  we 
began  installing 
it,  things  got 
weirder.  The 
install  program 
wanted  informa¬ 
tion  about  the 
database  server 

on  both  ends  of  the  synchronization. 
We  hadn’t  planned  on  installing  SQL 
or  Oracle  on  each  PC,  so  we  were 
confused.  Synchrologic  support  told 
us  that  data  in  this  case  meant  data- 
base.We  were  told  to  install  the  file 
and  software  distribution  programs 
on  the  server,  which  were  located  in 
the  CD’s  iMobile  iFDiSD  directory. 

Synchrologic  support  said  most 
customers  attend  a  two-day  class, 
and  that  it’s  usually  a  firm’s  database 
analyst  who  handles  iMobile  Suite. 
It’s  a  network  task  to  synchronize 
data,  and  the  network  management 
staff  should  handle  it,  though.  Still, 
all  the  iMobile  Suite  programs  are 
tied  to  databases,  so  there  is  a  lot  to 
be  said  for  the  database  analyst 
being  responsible  for  the  package. 

While  Synchrologic  provides  a 
runtime  copy  of  the  Sybase  Adaptive 
Server  database  engine  with  the 
iMobile  Suite,  the  company  also 
warns  you  this  is  just  for  evaluation 
purposes,  and  has  some  limitations 
that  make  it  unsuitable  for  produc¬ 
tion  use.  Synchrologic  recommends 
the  use  of  the  full  Sybase  Adaptive 
Server,  Oracle  8i  or  Microsoft  SQL. 
IMobile  Suite  is  also  dependent  upon 
Microsoft’s  Internet  Information 
Server  (IIS)  and  Internet  Explorer.  We 
were  surprised  to  find  that  we 
needed  a  secure  server  certificate 


from  VeriSign  to  use  the  product. 

As  with  many  products  that  use 
IIS  and  a  database  engine,  you  may 
install  the  whole  thing  on  a  server. 
But  if  system  loading  and  perfor¬ 
mance  are  issues,  iMobile  Suite  and 
the  database  engine  can  be  loaded 
on  one  server,  with  another  server 
running  IIS.  We  found  it  necessary  to 
manually  set  up  Open  Database 
Connectivity  to  recognize  the  data¬ 
base  and  then  manually  set  up  much 
of  the  iMobile  Web  site.  Given  that 
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The  Internet-Explorer  based  iMobile  Suite  client  software 
lets  users  select  the  connection  they  want  to  use,  get  infor¬ 
mation  on  available  software  and  data,  restore  backed  up 
data  and  more.  Here  we  are  checking  for  new  data,  and  the 
Images  publication  has  been  flagged  as  "NEW." 


Synchrologic  has  specified  the  data¬ 
bases  and  the  Web  server  it  sup¬ 
ports,  it  should  make  the  compo¬ 
nents  interact  correctly. 

Once  we  were  directed  to  the 
proper  path,  things  got  better.  Still,  a 
readme  file  in  the  root  of  the  CD,  a 
pamphlet  or  even  a  clear  statement 
of  what  each  package  does  near  the 
beginning  of  its  documentation 
would  have  helped. 

The  first  time  we  installed  iMobile 
Suite,  it  took  about  14  hours.  The  last 
time  we  installed  it  that  was  whittled 
down  to  about  four  hours,  including 
an  hour  to  get  another  secure  server 
certificate.  There  was  nothing  terribly 
hard  in  doing  it,  just  lots  of  finicky 
little  details  that  the  installation  pro¬ 
gram  should  have  handled.  Thank¬ 
fully,  the  client  software  is  based  on 
Internet  Explorer,  and  the  package  is 
largely  Web-based.  Client  installation 
went  smoothly,  which  was  a  pleasant 
surprise. 

In  the  end,  we  saw  promise  in 
iMobile  Suite,  but  several  rough 
edges  —  from  installation  to  usage 
—  need  to  be  ironed  out. 

Avery,  a  network  consultant  from 
Gunnison,  Colo.,  has  designed  and 
supported  networks  of  all  sizes.  He 
can  be  reached  at  mavery@mail.  other 
when.  com. 
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On  The  Networked  World  live  webcast, 

what  separates  a  respectful  debate 

on  Active  Directory  vs.  Novell  Directory  Services 
from  a  lively  exchange 

approaching 


Every  month,  Network  World  Editorial  Director 
John  Gallant  brings  together  opinion  leaders 
on  all  sides  of  the  hottest  IT  issues.  Like 
whether  ASPs  are  right  for  you.  Whether 
convergence  is  for  real.  Even  whether  there's  really  any¬ 
thing  you  can  do  to  prevent  a  hack  attack.  The  Networked 
World  cuts  through  the  hype  to  show  you  what's  true  and 
what's  nonsense.  Other  regular  features  include  Executive 
Editor  Doug  Barney,  with  his  own  take  on  today's  top  IT 
news;  Paul  McNamara,  with  the  NetBuzz  everyone  will  be 


talking  about;  and  Mark  Gibb's  irresistible  version  of 
IT  Backspin.  The  only  opinion  that's  missing  is  yours.  To 
participate  in  this  free  live  webcast,  reserve  your  space 
now  at  www.ITworld.com/itwebcast/nw. 

Register  today!  The  Networked  World 
Friday,  September  8  at  1  p.m.  ET 
www.ITworld.com/itwebcast/nw 

•  Which  high-preformance  directory  service  should 
you  embrace? 

•  What  works  best  in  a  multi-vendor  environment? 
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Digging  for  resources 

Find  out  how  to  improve  your  research  methods  and  glean  that  nugget  of  product  or  technology  information  you've  been  looking  for. 
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BY  SUZANNE  GASPAR 

Your  company’s  Web  site  is  drawing  more 
visitors  than  ever  expected,  and  it  won’t 
be  long  before  traffic  slows  to  a  crawl 
if  you  don’t  do  something  about  it. 

You  only  have  a  few  weeks  to  figure 
out  which  type  of  cache  implemen¬ 
tation  will  work  best  for  your  net¬ 
work  and  decide  what  to  buy. 

Research  projects  such  as  this  one  can 
be  daunting,  but  there  are  many  ways  to 
find  new  products  and  technologies.  We 
asked  network  professionals  and  research 
experts  to  share  their  tips  and  techniques 
for  sifting  through  reams  of  data  and 
extracting  the  kernel  of  information  they’re 
seeking. 

Besides  reading  trade  publications  such  as 
Network  World  and  scanning  Network  World 
Fusion,  folks  recommend  exploring  the  Web  and 
reading  daily  newsletters.  Yet  net  executives  and  ana¬ 
lysts  say  the  best  research  is  accomplished  by  talking 
to  peers  and  trusted  vendors. This  is  how  you  get  the 
inside  scoop  on  the  proven  performers. 

“Most  people  are  very  proud  of  their  solutions 
and  simply  love  to  tell  you  about  it,”  says  Garren 
Shannon,  systems  and  programming  manager  for 
Washington  State  University  in  Spokane.  “Those  who 
have  horror  stories  also  love  to  tell  you  about  them.” 

Vendor-sponsored  seminars  and  trade  shows  pro¬ 
vide  a  key  opportunity  for  peer  networking.  Fellow 
attendees  with  similar  IT  needs  can  tell  you  how  the 
products  they’ve  tried  panned  out. 

If  you’re  researching  emerging  technology,  the 
Internet  is  the  place  to  go. The  only  problem  is  the 
sheer  volume.  A  few  years  ago,  a  basic  search  would 
reveal  10  to  20  links. Today  you  get  upward  of  3,000. 

Some  people  keep  looking  until  they  find  what 
they  want.  But  others  say  before  searching  it’s  best 
to  think  about  the  topic,  define  the  goal  and  scope, 
confirm  known  data  and  then  use  keywords  to 
broaden  the  search. 

Try  several  search  engines,  such  as  AltaVista,  Lycos, 
Northern  Light  and  Yahoo,  and  use  the  search  tools 
on  individual  sites  to  find  text.  Look  for  significant 
data  in  the  first  two  paragraphs. 

“Software  research  really  wastes  time  because  not 
one  company  sells  everything,”  Shannon  says.  He  rec¬ 
ommends  finding  a  site  that  offers  good  information 
about  lots  of  applications,  as  Beverly  Hills  Software 
(www.bhs.com)  does  for  Windows  NT  and  2000.  For 
hardware,  Shannon  sticks  with  proven  vendors,  such 
as  Cisco,  Compaq,  Dell  and  NEC. 

Another  tip  is  to  search  the  Web  sites  of  trade 


orga¬ 

nizations 

and  participate  in  user  groups. 

“Industry  trade  organizations  are  great  because 
you’re  getting  feedback  from  many  different  vendors, 
not  just  one  perspective,”  says  Jason  Wright,  an  ana¬ 
lyst  with  Frost  &  Sullivan  in  San  Antonio,  Texas. 

There  are  groups  devoted  to  almost  even'  specific 
topic,  such  as  the  Computer  Security  Institute  and 
the  System  Administration,  Networking  and  Security 
Institute. 

Check  a  user  group  for  common  issues  that  may 
affect  your  use  of  a  given  product.  But  use  caution. 
While  you  can  often  get  valuable  information  from 
discussion  forums,  the  responses  could  be  tainted  by 
lack  of  experience,  technical  ability'  or  improper 
implementation. 

Irwin  Lazar,  an  analyst  with  The  Burton  Group  in 
Sterling,  Va.,  reads  newsgroups  on  topics  that  interest 
him. “If  I  have  a  special  requirement,  such  as  to  learn 
something  about  Microsoft  Exchange,  I’ll  sign  on  to 
the  appropriate  list  and  post  a  question,”  he  says. 

Wright  frequently  visits  the  Security  Exchange 
Commission  (SEC)  home  page  at  www.sec.gov 
/index. html  to  search  for  a  public  company’s  10-K 
annual  report. 

“The  SEC  10-K  can  be  taken  as  gold,”  he  says.  “This 
is  the  document  that  companies  report  to  the  gov¬ 
ernment,  so  you  know  it’s  very  factual.” 

Even  with  tenacity  and  patience,  the  volume  of 
information  required  to  make  enlightened  decisions 
or  formulate  intelligent  questions  for  vendors  is  over¬ 


whelming. To  sort  your  data,  file  by  topic  or  project. 
Save  your  URL  list  or  organize  the  data  you  intend 
to  reuse  or  recycle  within  Outlook. 

Kevin  Kampman,  a  Burton  Group  analyst  in 
Springfield,  Ohio,  saves  clippings  and  Web 
pages  into  Lotus  Notes  for  full  text  search 
and  retrieval. 

What  works  for  Richard  Howard,  sys¬ 
tems  support  branch  chief  for  the  U.S. 
Army  in  Washington,  D.C.,  is  to  digest  a 
little  information  every  day  from  various 
e-mail  newsletters.  “It  gives  me  a  quick 
gulp  on  what  is  going  on  in  the  areas  that 
I’m  interested  in,”  Howard  says. 

David  Curie,  an  analyst  with  Outsell  in 
Minneapolis,  subscribes  to  several  e-mail 
newsletters,  including  some  from  vertical 
portals  or  publications.  “Many  of  them  I  only' 
skim  quickly  each  week,  but  the  advantage  is 
that  they  come  at  me;  I  don’t  have  to  go  and  get 
them,”he  says. 

You  should  also  be  open  to  the  unexpected. 

“Good  research  is  rarely  a  linear  exercise.  Allow 
for  departures  from  the  norm,  serendipity,  and  occa¬ 
sional  fringe  perspectives  to  inform  a  larger  truth  or 
viewpoint,”  says  Tom  Valovic,  an  analyst  at  IDC  in 
Framingham,  Mass.  3 


Ten  research  tips 

1.  Read  constantly, 
eliminating  sources  that  are 
no  longer  useful  and 
adding  new  ones. 

2.  Develop  a  trusted 
network  of  advisors. 

3.  Take  advantage  of  training, 
seminars  and  trade  shows. 

4.  Learn  your  way  around  the  Web  sites  of  your  primary  vendors 
and  service  providers  so  you  can  quickly  find  what  you  need. 

5.  Visit  vendor  sites  frequently  for  updates,  fixes  and  feedback 
from  other  users. 

6.  Find  a  favorite  search  engine,  and  master  its  features  and 
capabilities. 

7.  Understand  the  value  of  different  sources  of  information. 

8.  Read  sources  that  provide  spin  or  opinion  to  help  you  put  an 
event  or  trend  in  context. 

9.  Save  periodicals  for  at  least  four  months.  Organize  them  by 
publication  date  and  bookmark  topics  of  interest. 

1 0.  Be  patient.  What  you  want  is  out  there,  you  just  have  to  | 
find  it. 

—  Suzanne  Gsapar  j£ 
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KVM  Networks™ 

Distributed  Access  to  Keyboard,  Video  and  Mouse  Control 


Because  a  growing  LAN  requires 
a  "Great  Deal"  of  data  center  space. 

ADM 


The  KVM  Network™  presents  a  new  concept 
in  Keyboard/Video  and  Mouse  Switch  (KVMS) 
technology.  It  is  a  fresh  approach  to  new  en¬ 
hancements  that  provide  data  center  operators 
with  secured  distributed  access  to  thousands  of 
computer  systems. 

The  original  KVM  Switch  allowed  only  one  con¬ 
nected  keyboard,  monitor  and  mouse  (console) 
attached  to  the  box.  Today's  technology  breaks 
the  limitation  of  the  original  hardware  by  accom¬ 
modating  from  four  to  over  three  hundred 
consoles  co-existing  on  the  same  KVMS  System 
backbone. 

The  latest  in  KVM  Switch  chassis  use  an  integra¬ 
ted  backplane  with  support  for  multiple  data 
paths.  A  combination  of  KVM  Switches  and  the 
middle  components  are  interconnected  using 
standard  category  5  network  cable.  The  chassis 
backplane  determines  the  capacity  for  multi¬ 
console  access  to  computers  connected  to  that 
one  box.  The  details  of  each  KVMS  Systems'  com¬ 
ponent  design  and  chassis  capacity  establishes 
the  topology  and  guides  overall  deployment. 

To  easily  understand  the  potential  of  direct 
remote  access  to  the  keyboard,  monitor  and 

Chicago  (630)572-0312 


mouse  of  your  workstations  and  servers, 
consider  your  current  network  infrastructure. 

It  consist  of  clients,  servers,  network  hubs  and 
the  cabling  backbone.  An  enterprise-sized  KVMS 
System  is  comprised  of  a  similar  set  of 
components  consisting  of  two  end  pieces,  a 
middle  piece,  and  the  cabling  in  between.  The 
KVM  Network™  simply  defines  the  transmission 
of  a  different  data  set  comprised  of  electrical 
data  signals  that  control  the  computer  system, 
in  contrast  to  a  standard  network  where  data 
is  being  stored  or  moved  between  computers. 

The  KVM  Network™  provides  direct  access  and 
control  of  your  computer  peripherals  from 
remote  locations.  The  keyboard,  monitor,  mouse 
and  even  audio  input/output  devices  no  longer 
need  to  be  positioned  at  each  computer.  You 
have  complete  access  and  control  of  any 
computer  on  a  KVM  Network™  from  just  a  few 
-  to  a  few  hundred  consoles. 

Depending  on  the  product  selected,  a  KVM 
Network™  will  support  a  range  of  platforms  that 
include  the  PC,  Mac,  Sun,  HP,  IBM  and  ASCII 
terminal  devices.  Internal  components  can  pro¬ 
vide  translation  services  necessary  for  the  con- 

San  Francisco  (650)  525-2700 


version  of  dissimilar  protocols,  allowing  the 
user  to  select  the  type  of  control  peripherals. 
Additionally,  direct  I/O  services  are  available 
using  your  existing  network  infrastructure,  or 
through  dial-up  connections  for  out-of-band 
remote  access. 

KVM  Networks™  are  designed  as  part  of  the 
base  infrastructure  before  the  LAN  hardware 
is  installed  in  Computer  Rooms,  ISP's  and 
large  Data  Centers  world  wide. 

Tron  has  compiled  a  comprehensive  listing  of 
KVM  Network™  products  including  Product 
Descriptions,  Components,  Technical  Spec's, 
Features,  Benefits  and  the  System  Topology's 
with  special  hints,  tips  and  tricks  to  use  in 
your  own  design. 

Want  to  know  about  each  product,  how  they 
compare,  or  which  products  will  be  competing 
for  your  business?  Visit  our  web  site. 

http://www.tron.com 

Tron  International  Inc. 

When  You  Want  More  Than  Just  a  Product  Quote! 
Call  our  Technical  Teams 

(800)  808-4672 


Los  Angeles  (310)397-6625 


Stay  on  top  of  IT  with  Rose  KVM  Switches! 

KVM  is  the  industry  acronym  for  Keyboard-Video-Mouse.  KVM  switches  save  money  and  space  in  your 


server  room  or  on  your  desktop.  Rose  is  a  pioneer  and  leading  manufacturer  of  KVM  products. 


2-4-8-16  users  up  to  1,000  computers 

►  Multi-platform  for  PC,  Sun,  RS6000.HP,  DEC,  SGI 

►  Advanced  on-screen  display  technology 

►  Simple  bus  cabling  makes  expansion  a  breeze 

►  Switch  computers  from  your  keyboard  or  on-screen 
display 

►  Status  screen  shows  system  conditions  at  a  glance 

►  Security  features  prevent  unauthorized  access 

►  Flash  memory  for  free  lifetime  firmware  upgrade 

►  Programmable  view,  share,  control, 
and  private  modes 


1  user  up  to  256  computers 

►  Available  in  three  different  chassis  sizes; 

either  PC  or  multi-platform  (PC,  Unix,  Sun,  Apple) 

►  Advanced  on-screen  display  technology 

►  Simple  to  use,  keystrokes  switch  computers 

t  Flash  memory  for  free  lifetime  upgrade  of  firmware. 

►  Supports  up  to  1600  x  1280  resolution 

►  Full  emulation  of  keyboard  and  mouse  functions 

►  Security  features  prevent  unauthorized  access 

►  Simplified  cable  management 

USA 


UfkRDSE 

XT^electronics 


10707  Stancliff  Road  Houston,  Texas  77099 
Phone  281-933-7673  Fax  281-933-0044 

EUROPE 

Bourne  Works,  High  Street  Collingbourne  Ducis 
Marlborough,  Wiltshire,  SN8  3EH  United  Kingdom 
Phone:  +44  1 26  485  0574  Fax;  +44  1 26  485  0529 


kl 


Vista™ 


1  user  to  2,  4,  or  8  computers 


►  Low  cost  and  easy  to  use 

►  Switch  computers  from  front  panel  or  keyboard 

►  Supports  PC  or  PC/Apple 

►  Supports  up  to  1600  x  1280  resolution 

►  Plug  and  play 

►  Supports  Microsoft  intellimouse 

►  Tested  with  Windows  95/98,  NT,  Linux,  and 
others 


Get  Your  Rose 
Catalog  Today 


WWW.ROSEL.COM 

800.333.9343 
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We 

simplified 

Data. 

Now  we’ve 

simplified 

Voice. 


In  other  words, 
we’ve  simplified  your  life. 

Net  to  Net  Technologies,  VoDSL  the  Easy  Way” 

Net  to  Net's  VoDSL  solution  is  the  industry's  easiest  way  to  deploy  voice  and  high-speed 
data  solutions  over  your  DSL  infrastructure.  Our  integrated  voice  functionality  allows  you 
to  save  significant  amounts  of  money  by  eliminating  the  need  for  external  VoDSL  gate¬ 
ways,  and  with  Net  to  Net's  plug  'n'  play  philosophy,  you  can  now  bring  your  VoDSL 
customers  online  as  quickly  and  easily  as  your  data  customers. 


N1^  Net  to  Net™ 

TECHNOLOGIES 

www.nettonettech.com  contact@nettonettech.com 

T  603.427.0600;  877.638.2638  (toll  free)  F  603.422.0610 

112  Corporate  Dr.,  Ste  1,  Pease  Inti.  Tradeport,  Portsmouth,  NH  03801 


How  Do  You  ReBoot 
Remote  Equipment? 


ROUTER 


Cisco 


Cisco 


SERVER 


Sentry 


230  VAC 


Group  name 


functions 


Link  up  to  26  units 


Reboot  control 


Commander 
110  VAC  and 


Reboot  control 

Group  name 
functions 

NEBs  compliant 


•  Windows  NT 

'  Shutdown  support 

•  Console  port  access 

•  Multi  password 
levels 


With  Sentry! 

Now  with  Sentry,  you  can  reBoot  any  locked-up 
internetworking  device  through  a  standard  dial-up 
modem,  ewer  an  ethernet  network  via  TCP/IP  using 
Telnet,  through  a  JAVA  interface  or  with  SNMP 
support.  The  Sentry  family  of  products  provides 
an  easy  practical,  and  secure  solution  for  power 
management  of  remote  internetworking  equip¬ 
ment.  Select  the  Sentry  model  best  for  you. 


Benefits 


•Faster  problem/ID  solution 
response  time 

•  Improved  network  availability 

•  Improved  network  service  levels 

•  Improved  facility  security 


Reduces  field 
service  visits  to 
POP  sites 


Sentry -48  VDC 

•2  u  rack 

•  100  Amp  power 
input  feeds 

•Supports  20  Amp 
and  35  Amp 
internetworking 


See  our  complete  product  line  at: 

Web:  www.servertech.com 
Phone:  1-800-835-1515  or  1-408-745-0300 
Fax:1-408-745-0392 


Another  great  product  from  ;J  /J - -j^> 

Server  Technology  Inc. 


©1999  Server  Technolosy  Inc.  Sentry  is  a  trademark  of  Server  Technolosy  Inc. 


Learn  Key  Self-Paced 

Computer  Training 


www.learnkey.com 


* 


1.800.865.0165 


WINDOWS  2000 


SESSIONS  VIDEO 


CD-ROM 


•Learning  Win  2000  User  Course 

3 

$145 

$175 

•  Professional  Administration 

5 

$365 

$425 

•  Directory  Services  Administration 

4 

$325 

Soon 

•  Network  Infrastructure  Admin. 

5 

$365 

Soon 

•  Server  Administration 

Coming 

Soon! 

★  Save  on  Windows  NT  Courses! 

★  FREE  Windows  2000 
Planning  Video  with 


Microsoft  Certification  Purchase! 


Learn  From 
The  Experts'* 


1 -800-775-4GTA 

Web:  http://www.gnatbox.com 
Email:  gb-sales@gta.com 
Tel:  +1-407-380-0220  Fax:  +1  -407-380-6080 


The  Simple,  Powerful  &  Affordable 

Firewall 


Proven  Firewall  Technology 
Network  Address  Translation 
Unlimited  User  License 
High  Performance 
Transparent  Network  Access 
Easy  to  Configure  &  Operate 
Remote  Web  Based  Management 
Cost  Effective 

Time  Based  Access  Control 
URL  &  Content  Filitering 
Email,  Pager  &  SNMP  Trap  Alerts 
Email  Proxy 

ISDN,  xDSL  &  Cable  Modem  Support 
Win95/NT  Management  Client 


$  995.00 


\ 


y°wr  -u  v\»r 
^et*0  AVAILABLE  TODAY,  WHY  WAIT??? 


More  Standard  Control  Options  Than  Any  Other! 

JAVA  BROWSER 
SNMP  &  TELNET 
VISUAL  BASIC  GUI 
LOCAL  CONSOLE  PORT 
INTERNAL  MODEM 


E-COMMANDER 


World's  Largest  Installed  Base  of  AC  &  DC  Switches! 

POWER  MANAGEMENT 
UP  TO  30  AMPS  250  VAC 
&  200  AMPS  48  VDC 
17  COMPLETE  SOLUTIONS 

More  Solutions  &  More  Installed  Than  Any  Other! 


POWER 


SWITCHES  FOR  RS232 
CATS,  V.35,  RS422,  VOICE, 

ATM,  VIDEO  &  UP  TO  192  PORT 
MATRIX  SWITCHING 


Complete  Physical  &  Environmental  Management! 


A 

T5< 


COMMSinc 

5720  144th  Street  NW 
Gig  Harbor,  WA  98332 
(800)  247-1431 


ALARM  GATHERING,  REMOTE 
HIGH  LOAD  CONTROL,  CURRENT 
MONITORING,  THRESHOLD 
ALARMING  FOR  TEMPERATURE, 
CURRENT  AND  SECURITY  ISSUES 


See  us  at  Networld  +  Interop 


www.e-comms.com 
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Pulizzi  Engineering  is  introducing  3  NEW  products 
that  will  change  the  way  you  power  your  rack! 

VISIT  US  AT 

NETWPRLD+INTEROP 

BOOTH  6873 


1*1  I  f //» 


Z-LINE 

Since  1973 


PULIZZI  ENGINEERING  INC. 

www.pulizzi.com 


1.  NETWORK  CONTROL  OF 
POWER/REMOTE  REBOOT 

Power  cycle  your  locked 
up  equipment  via  your  net¬ 
work,  telnet  or  the  internet. 
Shut  down  equipment  during 
oft  peak  times  and  monitor 
status  remotely. 

2.  REDUNDANT  AC  POWER 
SWITCH  Add  dual  input 
redundancy  to  any  network 
equipment.  Unit  accepts  two 
power  inputs  and  automatically 
selects  the  active  source  in  a 
brown  out  or  power  outage. 

3.  UL  LISTED,  HIGH  CURRENT 
POWER  DISTRIBUTION 

Models  are  "UL”  Listed  for  per- 
.  manent  installation  in  your 
equipment  rack.  Current 
ratings  up  to  20  or  30  Amps  to 
power  demanding  servers. 
Three  phase  models  available. 


Can't  wait  until  NetWorld+ Interop  2000?  Call  us  toil  free  at  800-870-2248  for  details  now! 


After  years  of  buzzing 

from  server  to  server. 

Bob  was  relieved  to  know  he 
could  Control  all  his  servers  from 
One  keyboard,  monitor,  and  mouse. 


Simple  cable  hook-ups  make  it  easy  and  convenient  to  access  and 
control  from  2  to  256  computers  from  the  comfort  of  a  single  user 
console.  Or  more  than  2,000  computers  from  multiple  user  consoles. 

Stop  flitting  from  server  to  server.  Enjoy  the  Centralized 

_  Convenience  Of  intelligent  KVM  switching  solutions. 

Call  1-800-724-8090  X16.  Or  visit 

**  www.rantan.com 

Intelligent  KVM  Switching 


Expansion  has  turned  many  a  data  center  into  a  beehive  of  activity. 
Fortunately,  Raritan  KVM  Switches  are  the  perfect  way  to  keep  growing 
computer  installations  under  control  without  multiplying  the  number 
of  keyboards,  monitors,  or  mice. 
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SlPlfe 


High  Performance  LAN/WAN  Troubleshooting 
&  Protocol  Analysis  Software  Solutions 


Removes  the  Mystery  of  What  is 
Being  Sent  or  Received  by  LAN  Stations 

Observer  identifies  network  trouble  spots  and  costs 
thousands  less  than  expensive  hardware-based 
analyzers.  If  you  have  any  network  problems,  find 
out  the  cause  with  Observer,  Expert  Observer  or 
Observer  Suite. 

•  Full  packet  capture  and  decode  for  over 
1000  protocols,  including  TCP/IP  (v4  and  v6), 
NetBIOS/NetBEUI,  IPX/SPX,  Appletalk, 

SNA  and  DECnet 

•  Switched  mode  sees  ail  ports  on  a  switch 
gathering  statistics  from  an  entire  switch  or 
packet  capture  from  any  port(s) 

•  Long-term  network  trending  collects  statistical 
data  for  days,  weeks,  months,  even  years 

•  Optimized  ErrorTrack  NDIS  drivers  display 
true  errors-by-stations 

•  Real-Time  Statistics  include  Top  Talkers, 
Bandwidth,  Protocol  Statistics, 

Efficiency  History 


BCPEUT 

m m 


SUITE 


•  Additional  probes  are  $295  per  local  or  remote 
segment/site/switch 

•  Ethernet  (10/100/1000),  Token  Ring,  FDDI 

Expert  Observer — Identifies  Problems  and 
Provides  Expert  Information  in  Plain  English 

Expert  Observer  includes  all  of  the  features  of 
Observer  plus  real-time  and  post-capture  expert 
event  identification,  expert  analysis,  VoIP  expert 
and  modeling  of  network  traffic  data. 

Observer  Suite — The  Ultimate  Tool  For  The 
Most  Demanding  Power  User 

Observer  Suite  provides  a  full  complement  of  tools 
that  includes  all  of  the  features  of  Expert  Observer 
plus  SNMP  management,  RMON  console/Probe 
and  Web  reporting.  Includes  one  remote  Probe. 


©2000  Network  Instruments,  LlC.  Observer, 
Network  Instruments  and  the  "N"  logo 
are  registered  trademarks 
Instruments,  LLC. 


Call  800-526-7919  or  visit  us  online  for  a  full-featured  evaluation: 

www.networkinstruments.com 

US  &  Canada  (952)  932-9899  •  Fax  (952)  932-9545  •  UK  &  Europe  +44  (0)  1322  303045  •  Fax  +44  (0)  1322  303056 


Console  Management  Over  Telnet! 


Access  Network  Serial  Console  Ports 


The  CMS- 16  Console  Management  Switch  provides 
secure,  in-band  and/or  out-of-band  access  to  RS232 
console  ports  and  maintenance  ports  on  UNIX  servers, 
routers,  and  other  network  equipment.  System  admin¬ 
istrators  can  access  remote  devices  in  order  to  change 
configuration  parameters,  connect  users  to  restricted 
ports,  collect  buffered  data,  and  perform  a  variety  of 
other  control  related  functions. 


DSLAM  SUN  LINUX  ROUTER  DSU/CSU 

CONSOLE  CONSOLE  CONSOLE  CONSOLE  CONSOLE 


REMOTE 

ADMINISTRATOR 


LOCAL 

TERMINAL 


TERMINAL 

SERVER 


Visit  us  at  N+l  Atlanta,  Booth  #7817 

□  western 

□  telematic  inc. 


Ub  C4I 


AC  or  48V 
DC  Power 


lOBase-T 
Ethernet  Interface 


RS-232  Ports 


19"  or  23”  Rack 
Mounted 


✓  Sixteen  (16)  RS232  DB9  Serial  Ports 

✓  lOBase-T  Ethernet  Port 

✓  TCP/IP  Security  Features 

✓  Port-Specific  Password  Protection 


✓  Non-Connect  Port  Buffering 

✓  Modem  Auto-Setup  Command  Strings 

✓  Co-location  Features 

✓  AC  and  48V  DC  Powered  Models 


Visit  website  for  complete  Net  Reach™  product  line. 

(800)  854-7226  •  www.wti.com 


5  Sterling  •  Irvine  •  California  92618-2517  •  (949)  586-9950  •  Fax:  (949)  583-9514 
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tub  of  the 


Huy  * 
Net  wot 


The  Hub  of  the  Netu 
k  Buy  *  The  Hub  of  it 


www.  dataprobe.  com/rs3.  html 

Ij/Ciataprobe 

INC.  r 


i -800-436-3284  •  201-967-9300 


$80 


.  :  ‘  WSWmSM-:  \ 


WsMm 


•  Hot  Standby  Equipment 

•  Line  Protection 

•  CTI  Server  Swapout 

•  Circuit  Switching:  Analog  to  DS-3 

•  Full  Automation  &  Network  Control 


Buy  Lease  Authorized  Reseller  Sell  Repair 

New  Refurbished  Used 

____  .  Nortel 

rrriifFfir^ 18005530592  3Com 

www.wdpi.com 

0ini)OG33D3B  Email:  cisco5@wdpi.com  Imwm 


Do  you  offer  Training 
or  Btucational  Services? 


If  so,  call  Enku  today  to  find  out  how  to 
place  your  listing  in  our  Training  Directory. 

1-800-622-1 108  ext.  6465 


SNMPc  Enterprise 
Manager 

1  )istributed  management 
for  Windows  NT.  Supports 
remote  consoles  and 
polling  agents,  Web  Trend 


Network 

Management 

for  Microsoft  Windows 


Reporting  and  more. 


SNMPc  WorkGroup 
Manager 


Affordable  management 
for  small  networks. 

With  an  installed  base 
of  over  60,000  copies, 
this  popular  tool  is  resold 
by  major  OEMs. 


A  Castle  Rack 

yr  computing 


Phone:  408.366.6540 
Fax:  408.252.2379 


BayTech 
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W  t ,  0cKed  E^^here 
Reboot  toc^e  from  W 


When  network  equipment  is  locked, 
there  is  no  better  way  to  reboot  than 
with  BayTech's  RPC  product  line. 

■  Turn  on,  off  or  reboot  all  receptacles 

■  1  5-  or  20-Amp  models  available 

■  Models  accessible  via  Ethernet  (Telnet), 
RS-232  or  dial-up 

■  Multi-user  interface  for 
co-location  installations 

■  Built-in  surge  suppression 

■  1  1  5V  AC  and  220V  AC  models  available 

NEW  FEATURES  AVAILABLE 

■  Know  when  you  are  reaching  the 
capacity  of  your  1  5-  or  20-Amp  circuits 
with  TRUE  RMS  Current  Reporting 

■  Audible  and  LED  overload  alarms 

■  Vertical  mounting  for  large  data 
center  applications 


■  Sfti .. 

H  crsan 

■  ..  r  ■  | 

Rear  View 


www.baytech.net 


Horizontal  Mount 


1-800-5?3-£ 
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•  High  Packet  Throughput 

•  Enhanced  Security  Features 

•  Accurate,  Reliable,  Simple,  Secure 


www.truetime.com  800-328-1230 


You  can  follow  in 
the  footsteps  of 
others.  Or  you  can 
3  lead  the  way. 

'  ?  ~  Wave  Technologies 
O  will  help  you  get 
,  there.  Our  multiple 
j  media,  self-study 

Career  Packs  give  you 
VG  the  power  to  soar 
.'  above  the  crowd. 

You'll  gain  the  skills 

Eyou  need  quickly, 
conveniently  -  on 
your  own,  at  your 
pace,  and  on  your  ^ 
way  to  the  top. 


Buy  an  MCSE  Career  Pack 
and  Get  a  CCNA™  Career 
Pack  FREE! ($895  Value) 


Offer  expires  October  31*  2000 


C2000  Wave  Tetbriolpgies  International',  Ipc.  Waye  'Tecfinoiogies  and  the  Wave  logo  are  registered  trademarks  of  W; 
fbchrlolat]ies  lriternation,li„  Hit  Thdfnson  Leaf  rung;  !$  »i  trademark,  tnvein.  used  under  license  All  other  brahd  names 
jnpmioneti  (herein:  are  used  Jor  ndeivtifitalion  ‘puTpiV'tS  only  <it'uL.ij.e  trademarks  of  .then  respective  owners  Programs 
.ayrtijatile  iii  M miresD t a  on ly  t o  e rtipl dyer  .sponsored  iMJirrees. 


Specialist  in  all  CISCO  Products 

Including  Memory  LAN/WAN  Products 

WE  CARRY  ALL  MANUFACTURERS 

Livingston  •  Ascend  •  US  Robotics  •  Micom  •  HP  •  3Com 
Adtran  •  Motorola  •  Codex  •  ADC 

WE  BUY  AND  SELL  ~  NEW,  USED,  LEASE,  RENT 


•  Routers,  VLANs  •  Access  Servers 

•  DSU/CSU’s  •  Hubs,  Modems 

'A<-‘Sco 

•  Switches,  ATM  •  Voice  Over  IP 

c?"*  Ji 

|K 

888.S01.2001 

£ 

o 

phone  916.630.2001 

fax  916.630.2000 

r- 

Visit  our  Website  at: 

■'V  1*1  I  L  1. 

E  N  N  1  U  M 

http://www.millenniumsolutions.net 

s  a  l,  u  t  i  a 

Nfl  G  K  O  IJ  1'  -  N  U 

USED  NETWORK  HARDWARE 

We  just  know  more  about... 


Routers  •  Switches  ♦  T1/T3  DSU/CSU  •  Access  Servers  *  Cables  •  Memory 

Buy  *  Sell  ♦  Overnight  Delivery  *  Fully  Guaranteed 

,  .  i 


III/  Shop 

networkhardware.com  nllne! 


X, 

>,  Y; 


Products 
purchased  as 
a  result  of 
Marketplace 
ads. 


/  Hubs 

/  Routers 

/  Software 
training 


/  Memory 
products 

/  Ethernet 
Cards 

/  Netware 
products 


/  Modems 


V  Testing 


equipment 

/  Multiplexers 

T\ 

/  File  Servers 

i  4 

1 

V _ _ 

Find  the  Product  and  Services  that  you  are  looking 

for  on  Network  World  Fusion's  Product  Showcase, 
go  to:  www.nwfusion.com 
click  on:  Product  Showcase 


FREE  3Com  Palm  V* 


WE  BUY  USED 


►PalmV 

CttMtltl  &*•*.-»  I 


HIGHEST 
PRICES 
PAID! 


NETWORKING 


3;i. 

Cisco  Systems 


Bay  Networks 


caaerRon 

_ systems 

T>»  Carrgm*  MMwortyQ  SekJDa* 


Visit  www.4lanwan.com  to  enter  to  win  ^ 


WE  SELL  NEW  &  REFURBISHED 


GIGANTIC  DISCOUNTS  /  LONGEST  WARRANTIES! 

We  maintain  a  huge  inventory  of  parts  &  systems 
We  specialize  in  Legacy  &  hard  to  find  items 

Call,  E-mail  or  Fax  Your  Equipment  List. 


Celebrating 
Our  17th  Year 


ULANWAN.com 

*  A  Division  of  Ergonomic  Enterprises,  Inc, 

47  Werman  Court,  Plainview,  NY  11803 

CALL  TOLL  FREE:  877-4-LAN-WAN 

FAX:  516-293-5325  /  EMAIL:  SALES@4LANWAN.COM 
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used  cisco  mm 

•~h888-89-CISC0* 


Save  big  on  new/used: 

►T1/T3  DSU/CSU  ►  ATM  »ISDN 
►  Fast/GIGABIT/ENET  BUY/SELL/RENT 


Routers  >  Switches 
►  Frame  Relay  >XDSL 


Cisco  Systems 


PARTNER 


>  ►  CISCO 

NETFAST  >ra 

N— ^  ►  Adtran 

www.netfastusa.com 


►  Casheflow  >  ADC  Kentrox  ►  Nortel  Networks 

►  Paradyne  ►  Juniper  Networks  ►  Foundery  Networks 

►  Alteon  ►  Extreme  Networks  ►  Quick  Eagle  Networks 


Netfast  Communications  Inc.,  56-29  56th  Drive,  Maspeth,  NY  1 1378  USA 
Phone:  1-888-892-4726  or  718-894-7500  Fax:718-894-1573 

Network  World  7/2000 


ftnnec  t 


COST-EFFECTIVE  COMPREHENSIVE  INTELLIGENT 


INTERLINK  COMMUNICATIONS  CORP.  IS  YOUR 
CISCO  SPECIALIST  OFFERING  CISCO-CERTIFIED 
TECHNICAL  SUPPORT,  90  DAY  PRODUCT  WARRANTY, 
AND  AGGRESSIVE  PRICING. 


Link  COMMUNICATIONS  CORP. 

7667  Cahill  Road  •  Suite  400  •-  Minneapolis,  MN  554.39 
Phone:  612.944.3440  •  Fax:  612.944.3534 
www.interlinkcom.com  •  Email:  sales<n'inferlinkcom.com 

All  trademarks  gre.  property  of  the  respective  owners 


For  More  Information  on 
Advertising  in  Network 
World’s  Marketplace 

1-800-622-1108 


- 


|  Cable  University 

(800)  537-8254 
www.CableU.net 

FREE  online  training  in  network 
cabling  installation  &  maintenance 


Cyber  Pass  Inc. 

(613)  237-4991 

www.certify.com 
CompTIA,  Microsoft, 

U  Novell  Exam  Simulation  Software. 

Learn  Key,  Inc. 

(800)  865-0165 
www.learnkey.com 
Self-Paced  Training  for  Computer 
1  Users  &  IT  Professionals 


NetworkTraining.com 

A  (800)  NET-SKIL 
(800)  638-7545 

■  Network  Analysis  &  Tool  Training  ■ 
g  Certified  NetAnalyst  Testing 

Wave  Technologies 

{I  (800)  711-0286 

|  www.wavetech.com 
MCSE,  Cisco,  MCSD,  A+,  Network-t-, 
CNE.Bootcamps,  Online,  Selfstudy 

To  Place  Your 
Listing  Here 
Call  Enku  Gubaie 
at  1-800-622-1108 


Contact 


these  companies  today  to  help  you  with  your  training  needs! 


800-783-8979 

Fax  916-781-6962 
We  Carry  ALL  Manufacturers 


'Specializing  In: 
3 -Com 
Nortel 

Bay  Networks 
Cabletron 

CISCO 

Ascend 

Fibermux 

Livingston 

Micom 

Motorola 

Synoptics 

Data/Voice 

Network 

Solutions 


LAN/WAN 
BUY/SELL 
NEW/USED 
RENT/LEASE 
Fully  Warranted 

Switches 

Hubs 

Bridges 

Routers 

Multiplexers 

T-1  Equipt 

DSU/CSU 

Modems 

Alternative 

Data 

Communication 
Sources,  Inc. 
916-781-6952 


A  Network  World  Signature  Series  Issue:  The  BUZZ  Issue 

Issue  Date:  September  11  Ad  Close:  August  28 


Network  Leaders  are  looking  for  the  whole  story.  They  need  to  know  about  the  real  issues  surrounding  the  most 
talked-about  technologies  and  ideas  in  networking  —  what’s  hype  and  what’s  real?  Network  Leaders  depend  on 
Network  World’s  Signature  Series  Buzz  issue  to  cut  through  the  static  and  provide  real  information  and  answers 
on  the  changes  in  networking. 

In  this  signature  series,  The  BUZZ  Issue... 


♦Suzz  reverb.  In  this  survey,  we  ask  readers  to  share  their  opinions  about  industry  buzz  in  general  and 
the  specific  technologies  highlighted  in  these  pages. 

♦/nto  the  buzz.  A  provocative  roundtable  discussion  on  the  technologies  that  have  everyone  abuzz  today 
and  the  impact  they  will  have  on  enterprise  networks. 

*  Wire  less  wherewithal.  Are  we  ready  to  cut  the  wires? 

♦  Quick  content  delivery.  Here’s  a  look  at  which  companies  play  in  the  market,  how  their  content  is 
delivered,  and  whether  their  services  are  right  for  you. 


♦  77?e  new  voice.  Our  guide  to  figuring  out  the  best  voice  service  option. 

♦  Toward  more  automated,  integrated  net  management. 

♦ Beneath  the  digital  marketplace.  We  look  at  the  major  digital  marketplace  software  and  examine  issues 
such  as  security,  scalability  and  integration.  _  NetWDfj(Ww1d 


And  much,  much  more! 


N0RTEL  NETWORKS 


Unbeatable  Prices  —  In  Stock.  Call:  800-243-5267 


^  Good  As  New  Gear —at  better  than  new  prices. 
^  Same  as  New  Warranties. 

350T-HD  $650.00 
100  Auto  Switch  (AL201 2E10) 

I  Quantity 


National  LAN  Exchange 

www.nle.com 


1380  W.  #600  •  Orem,  UT  84058 


CdBLCTROn 


•  ■  w  ''ctvvor,<s 


Also,  Sell  Us  Yoar 
Unwanted  Networking 
Equipment! 

e-mail: 

purchasitlg^bizinUoto 


http://www.bizinl.com 

call  us  in  the  USA  at: 

1 _ r\  '.to  am.  .  • 


You:  global 


All  Routers  and  CISI 

Switches  make 
Connections...  3C0M| 

BUY  BIZI’s  Quality  cabu 

Pre-Owned  Equipment 
&  Connect  for  a  lot  less!  -« 

•  50-80%  Savings  off  Retail  List  Prices 
•120-Day  Warranty 

•  100%  30  Day-Money  Back  Guarantee 

•  Large  Inventory  of  Newer  &  Older  Products 

•  In-House  Knowledgeable  Technical  Support 

•  Supplying  New  &  Quality  Pre-Owned 

Networking  Products  for  over  10  years  , 

•  Same  Day  Shipping 
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IT  CAREERS 

m2 

lcareers.com  ( 

p  careers 

(p  careers 

careers.com 

Software  Engineer  and  Senior  Software  Engineer  Positions  to  design, 
develop  and  implement  software  systems  to  determine  feasibility  of  de¬ 
sign  and  directs  software  testing  procedures,  programming  and  docu¬ 
mentation.  Work  involves  extensive  travel  and  frequent  relocation.  Must 
have  one  year  of  experience  in  job  offered  or  as  a  computer  profes¬ 
sional  as  well  as  one  year  of  skills  in  field.  Bachelors  or  Masters  de¬ 
gree  in  one  of  several  limited  fields:  Computer  Science/Apps,  Engi¬ 
neering.  Chemistry,  Math,  Physics,  or  scientific  or  business  related  field 
Will  accept  Bachelors  degree  with  five  of  progressive  experience. 
Salary:  $65,000  to  $105,000  per/yr,  40  hrs/wk.,  9:00-5:00  p.m.  Please 
submit  resumes  to:  Rapidigm,  Jaime  Lopez,  4400  Campbells  Run 
Road,  Pittsburgh.  PA  15205. 

RDBMS:  DB2,  Informix,  Oracle,  FoxPro,  MVS,  Novell,  UNIX, 
VAX/VMS,  Windows,  APT,  Crystal  Reports,  C,  C++,  COBOL. 

Oracle  RDBMS:  Designer  2000,  Developer  2000,  Oracle  RDBMS,  Or¬ 
acle  Applications,  SQL’Plus  Pro'C,  PL7SQL,  SQL’Forms,  SQL'Re- 
ports. 

GUI  and  Internet  Applications:  Windows  95,  Windows  NT,  Visual  C,  Vi¬ 
sual  C++,  C,  C++,  Visual  Basic,  PowerBuilder,  TCP/IP,  HTML,  MFC, 
CGI,  MTS. 

Mainframe:  IBM3090,  IBM  ES900,  MVS,  IMS,  CL/400,  CICS,  TSO, 
VSAM,  COBOL,  JCL,  AS/400 
PeopleSoft,  SAP  or  Baan 


Software  Engineer  wanted  to  de¬ 
velop  software  in  client/server 
architecture  for  web-based  com¬ 
munication  and  collaboration 
services;  responsible  for  all 
stages  of  system  development, 
incl.  specs.,  design,  coding,  test 
plans  8  debugging;  develop 
communication  protocols  bet. 
server  8  client  over  TCP/IP;  use 
OOA/OOD  methodology  to  de¬ 
sign  &  implement  server  soft¬ 
ware  under  Linux,  using  GCC 
compiier,  BSDsocket,  multi¬ 
threading,  Oracle,  database 
connecting,  8  to  design  8  devel¬ 
op  Microsoft  Windows-based 
client  software  using  MFC/Visu¬ 
al  C++  8  WinSock,  multi-thread¬ 
ing;  integrate  third  party’s  soft¬ 
ware  components  into  client 
software;  administer  company’s 
in-house  system/network/in¬ 
tranet  (Windows  98,  Windows 
NT  4,  Linux)  8  company's  ser¬ 
vice  server  (Linux)  operation 
network.  Must  have  a  Bachelor’s 
degree  in  Computer  Sci.'  1  yr.  ex- 
per.  in  C++  development  in 
client/server  architecture  incl. 
designing  8  implementing  net¬ 
work  communication  protocol 
over  TCP/IP  8  knowledge  of 
OOA/OOD  methodology.  Salary 
$72,500/yr.  Send  two  (2)  re¬ 
sumes  to  Case  #20002514,  La¬ 
bor  Exchange  Office,  19  Stam¬ 
ford  Street,  1st  FI.,  Boston  MA 
02114. 


SOFTWARE  ENGINEER:  Abili¬ 
ty  in  using  client/server  architec¬ 
ture  using  ORACLE  database 
and  Java  development  tools  like 
Visual  /cafe  4.0  and  Jbuilder3, 
Visual  Basic,  Windows  NT,  SQL 
Server  and  Rational  Rose.  Us¬ 
ing  version  control  tools  like  Vi¬ 
sual  Source  Safe,  and  RCS. 
Ability  in  using  Unix  operating 
systems,  Windows  and  software 
developing  languages  like  Java, 
EJB,  XML  and  e-Commerce  tool 
INTERSHOP  ENFINITY.The  job 
duties  are  to  Design,  develop, 
client/server  architecture  appli¬ 
cations,  install  and  upgrade  the 
applications,  Write  database 
procedures,  work  on  enterprise 
level  distributed  applications  with 
web  technologies,  test  and  im¬ 
plement  the  applications.  Re¬ 
quires  Bachelors  in  Computers 
or  Sciences  with  2  years  of  Soft¬ 
ware  development  experience. 
40  hours  per  week  at  $  50,000 
per  year.  Please  send  resume 
to  Case  #  20002333,  PO  Box  # 
8968,  Boston,  MA  02114. 


Caresoft,  Inc.  requires 
Computer  Professional 

Position  available  requires  2  yrs. 
exp.  w/B/S  degree  for  Program¬ 
mer  Analyst  8  1  yr.  w /  M/S.  for 
Software  Engg. 

AS/400,  RPG/400,  COBOL/400 
Visual  Basic,  Oracle,  Crystal 
Report 

Powerbuilder,  Sybase,  OLE 
C++,  Visual  C++,  Booch 
Rumbaugh  Methodology, 
Oracle. 

Java,  Peoplesoft,  HRMS, 
Benefits,  SQR 

Remuneration  commensurate 
w/exp. 

Travel  8  relocation  required 
Apply  to 
Attn:  Recruiter 
Caresoft,  Inc. 

3602  Hana  Road 
Edison.  NJ  08817 


AS/400  Systems  Analyst/ 
Programmer 

Develop,  implement,  8  maintain 
programs  on  AS/400.  Analyze 
and  test  programs  written  in 
RPG/400  on  AS/400.  Test, 
code,  and  debug  new  programs, 
modify  existing  programs  using 
subfiles,  RPG  III,  RPG  IV, 
CL/400  on  AS/400.  Must  have 
at  least  a  BS  or  BE  degree  in 
Computer  Science  or  related 
field  and  1  yr.  of  exp.  in  the 
above  position  or  1  yr.  exp.  as  an 
AS/400  Systems  Analyst/ 
Programmer  or  a  related 
position  w/ability  to  program  on 
AS/400  using  RPG/400,  CL/400, 
DDS,  8  Subfiles. 

40.0  hr/wk.  $59,774/Yr  8:00 
AM  -5:00  PM 

Applicants  send  cover  letter  and 
resume  to: 

Paul  Shaefer 

Director  of  Human  Resources 
The  Athelete’s  Foot  Group,  Inc. 
1950  Vaughn  Road 
Kennesaw,  GA  30144-701 7 


Tractor  Supply  Company  is  one 
of  America's  largest  and  most 
successful  farm  and  ranch 
companies  with  over  298  stores. 
Due  to  our  rapid  growth,  we 
need  experienced  computer 
professionals  in  our  Nashville 
office. 

Multiple  openings.  B.S.  or 
equivalent  required  for  all 
positions.  Experience  in  retail 
industry  preferred 

Software  Developers  8 
Programmers:  2  yrs.  experience 
in  SAP/R3  Retail  using  ABAP, 
Oracle  8  SQL. 

Database  Designers  8 
Database  Administrators:  2  yrs. 
experience  with  Oracle. 

Financial  Systems  Analysts:  2 
yrs.  experience  in  SAP/R3  Retail 
including  FI/CO  modules 
configuration. 

Send  resumes  to  Bo  De, 
320  Plus  Park  Blvd.,  Nashville, 
TN  37217.  Email 
bde  @  tractorsupply.com 


SVI  AMERICA  CORP.  is  an  in¬ 
formation  management  8  tech¬ 
nology  consultancy  co.  with  of¬ 
fices  throughout  the  US.  We 
work  with  many  organizations  to 
develop  integrated  solutions  that 
transform  their  enterprises.  By 
understanding  the  key  compo¬ 
nents  that  drive  an  organization, 
we  are  providing  tangible  results 
8  a  competitive  advantage  to  our 
clients. 

SVI  America  Corp.  presently  re¬ 
quires  Programmer  Analysts 
with  the  following  qualifications: 
A  Bachelor’s  degree  in  Comp. 
Sci.,  Math.,  Eng’g,  Business  Ad¬ 
min.  or  a  related  discipline,  1  yr 
exp.  in  job  offered,  and  working 
knowledge  of  Powerbuilder, 
RDBMS,  and  SQL.  Must  be  will¬ 
ing  to  temporarily  relocate  to 
client  sites  throughout  the  U.S. 

To  apply,  please  contact:  HR 
Dept.,  SVI  America  Corp., 
1580C  John  J.  Delaney  Drive, 
Suite  250,  Charlotte, 
NC  28277  or  E-mail: 
jobs  @  sviamerica.com. 


SOFTWARE  DEVELOPER  III: 
Will  be  responsible  for  providing 
software  engineering  leadership 
in  all  phases  of  software  devel¬ 
opment.  Essential  job  functions 
include:  develop,  design  and 
document  software  specifica¬ 
tions;  write,  program,  test  and 
troubleshoot  software  programs 
and  systems;  and  provide  tech¬ 
nical  consultation,  expertise  and 
team  leadership.  Will  also  partic¬ 
ipate  in  defining  and  refining 
software  Engineering  Standards 
for  the  entire  department.  Re¬ 
quirements:  Bachelor  of  Science 
or  Art  degree  or  equivalent  work 
experience  in  CS,  IT,  Math,  Sta¬ 
tistics  or  a  related  field  and  six 
(6)  years  experience  in  the  job 
offered  or  programming,  soft¬ 
ware  engineering,  systems  de¬ 
velopment  or  related  field.  Of¬ 
fered  salary  is  $78,000/year  for 
full-time  employment  (min.  40 
hours  per  week)  and  standard 
company  benefits.  EEO.  Submit 
2  resumes  and  respond  to  Job 
Order  #  2000-366,  PO  Box  989, 
Concord,  NH  03302-0989. 


SYSTEMS  ANALYST 
(Multiple  Openings) 

Analyze  8  evaluate  existing  or 
proposed  sys.  8  revise  comput¬ 
er  programs,  sys.  8  related  pro¬ 
cedures  to  process  data  using 
in-depth  knowledge  of  software 
dvlpmt.  life  cycle.  Encode,  test, 
debug  8  install  operating  pro¬ 
grams  8  other  software  systems. 
Design  8  code  interface  pro¬ 
grams  8  client  servers  using 
BAAN  ERP  Manufacturing  8 
BAAN  ERP  Distribution  tools  8 
programming  languages.  Bach¬ 
elor's  degree  (or  equivalent)  in 
Comp.  Sci.,  Math,  Engrg.,  Busi¬ 
ness  or  Commerce  plus  2  yrs. 
exp.  in  either  job  offered  or  as 
Programmer  Analyst  or  Software 
Engr.  rqd.  Must  be  proficient  in 
BAAN  ERP  configuration  mgmt. 
8  BAAN  4GL  or  PL/SQL  pro¬ 
gramming  language.  High  mo¬ 
bility  preferred.  40  hrs/wk,  8  am 
-  5  pm,  $88,000/yr.  Qualified 
applicants  report/subrnit  resume 
to: Thomas  Dembosky,  Mgr.,  In¬ 
diana  Job  Ctr.,  350  N.  Fourth  St., 
Indiana,  PA  15701-2000.  Refer 
to  Job  Order  No.  WEB1 15441. 


SENIOR  SOFTWARE 
ENGINEER:  Design  and 
development  of  distributed 
software  and  embedded  agent 
development  and  VxWrks  real 
time  operation  system  within  a 
SONET-based  networking 
switch  using  ATM,  Frame  Relay 
IP  and  Ethernet  protocols. 
Provisioning  of  circuits  is  done 
using  signaling-related  protocols 
such  asTLI .  Will  use  multi-task¬ 
ing  system  and  message-based 
system  to  implement  standard- 
based  TL1  agent  that  will 
manage  the  SONET  switch. 
Requires:  M.S.  in  Computer 
Science  and  1  year  Networking 
software  development  experi¬ 
ence.  Must  have  exp  of  CORBA, 
CMIP,  Real  Time  OS  VxWrks,  C, 
WinNT,  and  SunOS.  40  hrs/wk 
(9:00  a.m.  to  5:00  p.m.); 
$80,000/yr.  Send  two  (2) 
resumes/letters  of  application  to: 
Case  #  20002332,  Labor 
Exchange  Office,  19  Staniford 
Street,  1st  Floor,  Boston,  MA 
021 14.rahate-l 


1DOM  Inc.,  a  Banking  Consultant 
Co.  In  Newark,  NJ  seeks  people  to 
fill  the  following  positions: 

I.  Programmer  Analyst  (Multiple 
Opening)-  Must  have  Bach,  in 
Comp.  Sci/  MIS  or  Math  8  2  yrs 
exp  in  Power  Builder  Dvlp  writing 
d/base  prgms  in  SYBASE,  MS- 
SQL  server  and  ORACLE  on 
multiple  platforms  incl.  UNIX,  Win 
NT/95. 

II.  Sales  Manager  -  Expansion  of 
sales  and  marketing  operations 
of  financial  software  to  banks 
and  investment  houses:  Devel¬ 
opment  and  implementation  of 
sales  programs  /  policies,  Prepa¬ 
ration  of  business  plans  to  ex¬ 
pand  sales.  Expand  and  devel¬ 
op  new  client  base  in  banking 
industry.  Bach,  in  Business  Adm. 
and/or  Marketing  and/or  Eco¬ 
nomics  8  3  Years  Exp.  in  job. 

Respond  to:  HR  Dept.,  IDOM  Inc., 
One  Gateway  Center,  3rd  Floor, 
Newark,  New  Jersey  07102. 


Software  Development  Co.  in 
Trevose,  PA,  seeks  to  fill  the 
following  positions: 

i)  Software  Engineers  (Multiple 
Openings)  -  Must  have  Masters 
in  Math,  Sci.  Engg,  Commerce 
or  equiv  8  2  yrs  exp  dsgng,  dvlpg 
8  testing  in  Sybase,  Unix,  C  or 
SAP. 

ii)  Project  Managers  (Multiple 
Openings)  -  Must  have  Bach  in 
Math,  Sci,  Engg,  Commerce  or 
equiv  8  2  yrs  exp  dsgng,  dvlpg  8 
testing  in  Sybase,  Unix,  C  or 
SAP. 

Respond  by  resume  to:  HR 
Dept,  Zen  8  Art  of  Client  Server 
Computing,  Inc,  Neshaminy 
Interplex-US  Rt  1  8  Old  Lincoln 
Hwy,  Ste  301,  Trevose,  PA 
19053. 


SOFTWARE  ENGINEER  (2 
Positions):  Design,  develop,  test, 
implement,  and  maintain 
client/server  and  web-based 
applications  for  financial  and 
banking  industry  using  latest 
technologies.  Requires:  M.S.  in 
Engineering  field  with  NO 
EXPERIENCE  or  B.S.  in 
Engineering  field  with  5  years  of 
software  development  experi- 
ence.  Knowledge  of 
PowerBuilder,  ColdFusion, 
PL/SQL,  ASP,  COM/OLE, 
ActiveX,  Developer  2000, 
Oracle,  MS  SQL  Server,  and 
Windows  95/98/NT.  40  hrs/wk 
(9:00  a.m.  to  5:00  p.m.): 
$75,000/yr.  Send  four  (4) 
resumes/letters  of  application  to: 
Job  Orders  #  2000-342  and 
#2000-343,  P.O.  Box  989, 
Concord,  NH  03302-0989. 


Senior  Software  Consultant:  As¬ 
sist  in  the  analysis  development 
of  enterprise  architecture  and  In¬ 
ternet  service  architectures.  As¬ 
sist  in  the  analysis  and  architec¬ 
ture  solutions  with  enabling 
technologies  such  as  XML, 
workflows  and  Internet  service 
components.  Requires:  B.S.  in 
C.S.  or  related  field  and  2  years 
experience  in  web-based  appli¬ 
cations  development.  Demon¬ 
strated  knowledge  of  C++,  Visu¬ 
al  C++,  SQL  Server,  and  MS 
Access.  Demonstrated  skills  with 
ActiveX,  OLE,  COM/DCO,  and 
Object  Oriented  Design.  40 
hrs/wk  (9  to  5);  $72,500/yr.  Send 
two  resumes/response  to  Case 
#  20001572,  Labor  Exchange 
Office,  19  Staniford  Street,  1st 
Floor,  Boston,  MA  02114. 


DTCC  is  seeking  a  Software 
Configuration  Management  An¬ 
alyst.  Will  support  Merant  PVCS 
Version  Manager  and  Tracker. 
Develop  and  implement  version 
control  standards  and  proce¬ 
dures  for  in-house  developed 
applications.  Create  Change 
Management  Process  and  rec¬ 
ommend  Change  Management 
Best  Practices.  Integrate  Web 
testing  processes  into  applica¬ 
tion  SCM  Practices.  Develop  ap¬ 
plication  practice  standards/pro¬ 
cedures  for  the  Web  envrmt. 
Hands  on  exp.  in  SCM.  Prior 
knowledge  of  JAVA,  HTML, 
XML,  C/C++.  Experience  with 
MS  Project  or  other  task 
management  tool.  Business 
casual  attire.  Send  resume  to: 
recruiter2@dtc.org 

www.dtcc.com 


Programmer  Analyst.  $63K/yr. 
8a-5p.  40  hrs/wk.  Analyze,  dsgn, 
dvlp  8  prgm  systems  8  applies 
using  C,  C++,  Borland  C++, 
Visual  C++,  MFC,  ODBC,  DAO, 
SQL,  VB,  Visual  Java++,  Java, 
Sybase,  UNIX  8  WinNT.  Masters 
or  equiv  in  Comp  Sci, 
Electronics  or  related  field  of 
Engg.  In  lieu  of  Masters  degree, 
candidate  can  have  Bach  deg  in 
specified  majors  +  5  yrs  exp  as 
Programmer  Analyst  or  Systems 
Analyst.  Job  loc:  Duluth,  GA. 
Send  resume  w/ref.  file  #2-018  to 
Softscape  America,  Inc,  3308 
Peachtree  Indus.  Blvd,  #120, 
Duluth,  GA  30096. 


Programmer  Analyst  wanted  by 
Consulting  Co  in  New  York,  NY 
for  job  loc  throughout  NYC  metro 
region.  Must  have  Bach  in  Comp 
Sci,  Math  or  Engg  8  2  yrs  exp 
designing,  developing, 
programming,  installing  8 
upgrading  networked  client/serv¬ 
er  8  multi-tiered  financial  8 
business  applications  s/ware. 
Respond  to:  J.  Ishikawa, 
Systems  Research  8 
Consulting,  Inc.,  276  Fifth  Ave, 
Ste  802,  New  York,  NY  10001. 


Programmer  Analyst 
wanted  by  Financial 
Information  Services  Co  in 
Harrison,  NY.  Must  have 
BSc  in  Comp  Sci  or  related 
engg  field.  Respond  to:  HR 
Dept,  Standard  &  Poor's 
ComStock,  600  Mamaroneck 
Ave,  Harrison,  NY  10528 


Leading  software  and 
development  firm  seeking 
Consultants  and  Software 
Engineers  with  MS/BS.  Perform 
systems  requirements  analysis 
and  functional  design,  consider- 
ation  and  evaluation  of 
alternative  solutions  and 
functional  design.  Perform 
system  and  component 
engineering  and  implementa¬ 
tion,  system  and  component 
testing,  unit  testing  as  well  as 
integration  of  testing  using 
engineering  tools,  SQL,  and 
object  databases.  Send  resume 
to:  Maura  Kohl,  Recruiter,  The 
Exeter  Group  Inc.,  201 
Broadway,  Cambridge,  MA 
02139. 


Programmer  Analyst,  Bedford, 
MA;  Code,  design,  develop  and 
analyze  database  applications 
using  Web  based  technologies 
Visual  Basic,  SQL  server, 
DHTML  and  Visual  Foxpro. 
Provide  technical  support.  Reqd. 
Bachelors  in  Computer  Science 
or  Engineering  or  Math.  6 
months  exp  in  job  offered  or  6 
months  exp  in  any  computer 
related  profession.  40  hrs/wk., 
9a-6p.  Mon-Fri,  $56,000/Yr. 
Applicants  should  submit  two  (2) 
copies  of  resume  in  response  to 
case  #  20001997,  Labor 
Exchange  Office,  19  Staniford 
St.  1st  FI.  Boston,  MA  02114 


Computer  Programmer  Analyst 
wanted  by  New  Jersey  based 
Software  Development  8  Con¬ 
sulting  8  E-Commerce  Co  for  job 
loc  in  NJ  and  elsewhere.  Must 
have  Bach  in  Comp  Engg,  Sci  8 
1  yr  s/ware  exp.  Respond  to:  HR 
Dept,  UCA  Computer  Systems, 
Inc.,  9  Whippany  Rd,  Ste  #12A, 
Whippany,  NJ  07981. 


SYSTEMS  ANALYST,  SENIOR 
(EAST  SETAUKET,  NY)  Invest¬ 
ment  management  firm  seeks 
system  analyst  to  design,  devel¬ 
op,  enhance  8  implement  firm¬ 
wide  back-up  systems,  maintain 
NIS+  data  base  8  system  pro¬ 
grams  utilizing  UNIX,  TCP/IP  8 
PPP,  8  provide  system  level 
support.  Successful  applicants 
must  possess  Master's  in  Com¬ 
puter  Science,  at  least  1  year 
exp.  as  Systems  Analyst  or  Sys¬ 
tems  Administrator.  Salary  com¬ 
mensurate  w/exp.  Mail  resume 
to:  RTC,  600  Route  25A,  East 
Setauket,  NY  11733,  attn:  JR. 


Software  Installation  Man¬ 
ager  wanted  by  Co  involved 
in  s/ware  solutions  for  the 
banking  industry  in  Miami, 
FL.  Must  have  Bach  in  Busi¬ 
ness  Admin,  Computer  Info 
Systems  &  2  yrs  exp  in 
banking  comp  systems 
mgmt.  Respond  to:  Cluadia 
Suarez,  Americas  Software 
Corp,  550  Brickell  Ave,  Ste 
503,  Miami,  FL  33131.  Re¬ 
fer  to  code  RES001. 


Software  Engineer  wanted 
by  S/ware  Dvlpt  & 
Consulting  Firm  in  New 
York,  NY.  Must  have 
Masters  or  equiv  in  Math, 
Comp  Sci,  Engg  or  equiv  & 
2  yrs  exp  dsgng  &  dvlpg 
integrated  relational 
database  applies  using 
Oracle,  SQL  &  MS  Access 
&  constructing  GUI  &  web 
pages  Java,  HTML,  VB, 
Oracle  Forms,  D2K  &  C. 
Respond  to:  HR  Dept, 
Cyberstaff  America,  Ltd., 
855  Avenue  of  the 
Americas,  #618,  New  York, 
NY  10001. 


Mgmt  Consultant  8  S/ware  Dvlpt 
Co  in  Warren,  NJ  seeks  to  fill  the 
following  positions: 

1)  OLAP  Specialist  -  Must  have 
BS  or  equiv  in  Comp  Sci,  Math 
or  Engg  8  3  yrs  s/ware  exp. 

2)  Software  Developers  -  Must 
have  BS  or  equiv  in  Comp  Sci, 
Math  or  Engg  8  3  yrs  s/ware  exp. 

Respond  to:  HR  Dept,  Enable 
Vision,  LLC,  50  Mount  Bethel  Dr, 
Warren,  NJ  07059. 


Software  Engineer.  $65K  /yr.  8a- 
5p,  40  hrs/wk.  Analyze,  dsgn, 
dvlp,  prgm,  test  8  implmt  sys¬ 
tems  8  s/ware  applies  w/h/ware 
product  dvlpmt  using  C,  Visual 
C++,  Visual  J++,  Power  J,  Java, 
Oracle,  Sybase,  Cloudscape, 
Neva,  COM,  UNIX  and  Win  NT. 
Masters  or  equiv  w/major  field  of 
study  in  Comp  sci  or  Engg,  Elec¬ 
tronics,  Electrical  or  related 
branch  of  Engg.  Job  loc:  Char¬ 
lotte,  NC.  Mail  resume  to:  HR, 
Youcentric,  Inc,  600  Fairview  Rd, 
Ste  405,  Charlotte,  NC  28210,  or 
email  to:  resumes  @youcen- 
tric.com 


Software  Engineer  wanted 
by  New  Jersey  based  Tele¬ 
com  Consulting  Firm  for  job 
loc  throughout  the  US.  Must 
have  Masters  in  Comp  Sci, 
Engg,  Elec  Engg  &  2  yrs 
s/ware  exp.  Respond  to:  HR 
Dept,  MJ  Technology  of  NJ, 
Inc.,  762  Green  St,  Ste  2C, 
Iselin,  NJ  08830.  (Ref. 
59781 M). 


Programmer  Analyst/SAP 
Consultants  wanted  by  Soft¬ 
ware  Dvlpt  &  Comp  Con¬ 
sulting  Services  Firm  in  Edi¬ 
son,  NJ.  Must  have  Masters 
in  MIS,  Comp  &  Business  or 
Engg  &  Business  &  6 
months  comp  exp.  Respond 
to:  HR  Dept,  Strategic  Pro¬ 
fessional  Services,  Inc.,  505 
Thornall  St,  Ste  304,  Edi¬ 
son,  NJ  08837. 


SW  Eng’rs  (4+  positions  open): 
Research,  dsgn,  devl’p  commu- 
nic’n  SW  applic’n  w/  DB2,  CICS, 
VSAM,  VC  Cobolll;  dsgn  bus. 
mgt  sys.  w/  PowerBuilderS.x,  Or- 
acle7.x  SQL  Server;  Devl’p  en- 
g’g  process  8  intranet/internet 
applic’n  w/  Java,  VC++  on  Win- 
NT4. 0/Unix;  Dsg  GUI  w/  VJ++, 
Symantec/Visual  Cafe,  SunJDK 
8  C++  on  MFC;  Train  clients  at 
their  sites.  40h/w,  8-5, 

$68, 034/year,  Bachelor/foreign 
equivalent  in  bus.,  eng’g,  or 
computer  related  fields,  &  5  yr 
exp.  in  any  SW  position  w/  Ora¬ 
cle,  DB2  8  VC++;  or  Master  dgr 
8  1  yr  exp.  Resume  to  Job 
Ord. #2000-335/6/7/8,  PO  Box 
989,  Concord,  NH  03302 


Software  Engineer  wanted  by 
Software  Dvlpt  8  Consultancy 
Firm  in  New  York,  NY.  Must  have 
Bach  in  Engg,  Science, 
Commerce,  Math  or  equiv  8  3 
yrs  exp  dvlpg,  testing, 
documenting  8  planning  comp 
prgms.  Respond  to:  HR  Dept, 
ConciseDesign,  Inc.,  350  5th 
Ave,  Ste  1833,  New  York,  NY 
10013. 


Programmer  Analyst  -  Ann 
Arbor,  Ml  -  Analyze  reqs, 
design,  develop  &  imple¬ 
ment  database  mgt  sys  us¬ 
ing  Object  Oriented  Analy¬ 
sis  &  Design.  Use  C/C++ 
language,  Visual  C++  & 
MFC  on  UNIX  &  Windows 
NT  platforms.  M-F,  9AM- 
5PM,  35  hrs/wk,  $56,000/yr. 
Reqs:  Master  in  Comp.  Sci. 
or  Engr.  &  3  mos  exp.  Send 
resumes  to:  MDCD/ESA, 
PO  Box  11170,  Detroit,  Ml 
48211-1170,  Ref  #  147599. 
Employer  Paid  Ad. 


Programmer  Analyst 
wanted  by  Info  Technology 
Firm  in  Union,  NJ.  Must 
have  BS  in  Electronics  or 
Comp  Sci  &  5  yrs  exp  in 
Oracle  dvlpt  in  Win  NT  or 
UNIX  envrmt.  Respond  to: 
Patel  Consultants  Corp, 
1 525  Morris  Ave,  Union,  NJ 
07083. 


PROGRAMMER- 
ANALYSTS  (2)  wanted  by 
Telecom  Co  in 
Englewood,  NJ.  Must  have 
Bach  in  Comp  Sci  or  equiv. 
Respond  to:  Locus 
Telecommunications, 
Inc.,  Ill  Sylvan 
Ave,  Englewood,  NJ 
07632. 


Fulltime  Jr.  Systems  Analyst  re¬ 
sponsible  for  coding,  designing 
and  re-engineering  of  applica¬ 
tions  for  the  company  and  its 
clients  using  supercomputer  en¬ 
vironment.  Write  applications  us¬ 
ing  C++,  JAVA  and  RSA  Crypto¬ 
graphic  Algorithm.  Must  have  a 
Bachelor's  Degree  in  Telecom¬ 
munications  Engineering,  CS  or 
related  field.  Foreign  degree 
equivalent  accepted.  Must  have 
one  year  of  experience  in  job  of¬ 
fered  or  in  a  position  with  same 
duties.  Salary:  $62,000/yr.  Send 
resume  to  Raj  Shekaran  at  Soft¬ 
ware  Research  Associates,  70 
Mansell  Court,  Suite  100, 
Roswell,  Georgia  30076. 
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SOFTWARE  ENGINEER:  De¬ 
sign  and  development  in 
client/server  architecture  using 
SQL  Server  6. 5/7.0  database 
and  SQL  Server  Software  devel¬ 
opment  tools.  Experience  in  de¬ 
sign  and  development  of  soft¬ 
ware  projects  using  Windows, 
Internet  information  server  and 
Microsoft  Transaction  Server 
and  software  developing  lan¬ 
guages  like  ADO.  Java  Script  VB 
Script  HTML,  and  DHTML.  Ex¬ 
perience  in  Web  development, 
Component  Object  Model 
(COM),  Object  oriented  Pro¬ 
gramming,  Software  Engineer¬ 
ing  and  Database  Management 
System.  The  job  duties  are  to 
write  code,  complete  program¬ 
ming  and  perform  testing,  de¬ 
bugging  of  applications  and  im¬ 
plementing.  Also  to  update 
specifications  and  review  docu¬ 
mentation,  interface  with  the 
users,  define  system  require¬ 
ments  and  necessary  modifica¬ 
tions.  Requires  Bachelors  in 
Computers  or  Engineering  with 
2  years  of  Software  development 
experience.  40  hours  per  week 
at  $  72,000  per  year.  Please 
send  resume  to  Case  # 
20002170,  PO  Box  #  8968, 
Boston,  MA  02114. 


SOFTWARE  ENGINEER 
(position  located  in  Atlanta,  GA) 
to  design,  develop,  analyze, 
debug  and  modify  local,  network 
or  computer  software  programs 
for  commercial  or  end  user 
applications  using  C/C++; 
Perform  testing  and  debugging 
of  applications  using  Java/SQL; 
Maintain  information  of 
E-bills  and  customers  using 
Oracle  databases;  Responsible 
for  troubleshooting  software 
applications  and  systems. 
Require:  M.S.  degree  in 
Computer  Science,  Computer 
Information  Systems,  Engineer¬ 
ing.  or  a  closely  related  field; 
Must  have  a  demonstrated 
ability  to  perform  the  stated 
duties  gained  through  previous 
work  experience  or  academic 
coursework  and  projects. 
Salary:  $57,000  per  year, 
8  am  to  5  pm,  M-F.  Send  resume 
to  KM-HR,  CheckFree  Corp., 
6000  Perimeter  Drive.,  Dublin, 
OH  43017; 

Careers®  checkfree.com; 
Attn:  Job  MZ. 


SENIOR  SYSTEMS 
SOFTWARE  ENGINEER 

LiveVault  Corporation  (formerly 
Network  Integrity,  Inc.)  is  looking 
for  a  Sr.  Systems  Software  En¬ 
gineer  to  be  part  of  a  team  sup¬ 
porting  our  domestic  and  inter¬ 
national  customers.  The 
candidate  will  configure  and  pre¬ 
sent  our  solutions  to  customers 
and  enhance  to  provide  addi¬ 
tional  functionality  to  meet  client 
business  needs.  A  candidate 
should  have  at  least  5  years  ex¬ 
perience  with  Systems  Software, 
Windows  NT  internals  and  have 
desire  to  travel  to  work  closely 
with  customers.  A  bachelor's  de¬ 
gree  or  a  master's  degree  in 
Computer  Science  or  Engineer¬ 
ing  and  Microsoft  MCSE  certifi¬ 
cation  is  required.  Fluency  in  a 
European  language  is  a  signifi¬ 
cant  plus.  Location:  Marlbor¬ 
ough,  MA.  Working  Conditions: 
M-F  8AM-5PM,  40hrs/wk. 
Salary:  up  to  90,000/yr.  Send  re¬ 
sume  to:  Attn:  Rich  Piccolo,  Live- 
Vault  Corp,  201  Boston  Post 
Road  West,  Marlborough,  MA 
01752.  Ad  paid  by  and  equal  op¬ 
portunity  employer. 


Software  Engineer- Voice  &  Data 
Telecoms  wanted  by  Securities 
Brokerage  Firm  in  Boston,  MA. 
Must  have  3  yrs  exp  dsng,  dvlpg 
&  implmtg  nationwide  voice  & 
data  telecommunication 
networks.  Respond  to:  HR  Dept, 
Brown  &  Co  Securities  Corp, 
One  Beacon  St,  18th  FI,  Boston, 
MA  02108. 


Sr.  Systems  Analyst 

Provide  services  to  clients  relat¬ 
ing  to  design  &  development  of 
multi  business  applications,  & 
upgrading  versions  of  Sybase 
SQL  Server  to  year  2000  com¬ 
patible  versions,  configure  serv¬ 
er  parameters  &  create  memory 
pools,  clustered  indexes,  log 
page  thresholds,  &  stored  pro¬ 
cedures,  write  programs  to  mon¬ 
itor  Sybase  data  files,  using 
Sybase  Adaptive  Server,  SQL 
Manager,  Sybase  Central  Moni¬ 
tor,  SQL  Monitor,  S-Designer 
Case  Tools,  SUN-Solaris,  Win¬ 
dowsNT,  SUN  Spare  &  Intel 
Pentium  machines.  $80,000/yr. 
40hrs/wk.  B.S.  req’d  in  Comput¬ 
er  Sci.,  Math,  Computer  Eng.,  or 
any  Science  discipline  with  add'l 
concentration  in  Computer  Sci. 
B.S.  may  be  foreign  equivalent 
degree.  2  yrs.  exp.  req'd  in  job 
offered  or  2  yrs.  related  exp.  as 
Systems  Consultant  or  Sr.  Pro¬ 
grammer  Analyst.  Exp.  in  related 
occupations  must  include  use  of 
noted  skills  in  job  duties.  Will 
work  at  unanticipated  locations 
in  the  U.S.  Submit  2  resumes  or 
apply  to  the  GA  Dept,  of  Labor, 
Job  Order  #GA6731584.  1535 
Atkinson  Rd.,  Lawrenceville,  GA 
30043-5601  or  the  nearest  Dept, 
of  Labor  Field  Service  Office. 


♦ 


SYSTEMS  ANALYST 
(Multiple  Openings) 

Analyze  &  evaluate  existing  or 
proposed  software  sys.  Dvlp,  im¬ 
plement  &  improve  programs, 
sys.,  &  related  procedures  to 
process  data  using  in-depth 
knowledge  of  the  sys.  dvlpmt.  life 
cycle.  Encode,  test,  debug  &  in¬ 
stall  operating  programs  &  sys. 
software  based  on  client  specs. 
Design,  dvlp.  &  implement  soft¬ 
ware  pkgs.  in  the  SAP  environ¬ 
ment  utilizing  knowledge  of  SAP 
modules,  RDBMS  tools  &  pro¬ 
gramming  languages.  Bache¬ 
lor's  degree  (or  equivalent)  in 
Comp.  Sci.,  Math,  Engrg.,  Busi¬ 
ness  or  Commerce  plus  2  yrs. 
exp.  in  either  job  offered  or  as 
Programmer  Analyst  or  Software 
Engr.  rqd.  Must  be  proficient  in 
SAP  modules/environments,  Or¬ 
acle  or  Sybase  RDBMS  tools  & 
JAVA,  COBAL  or  PL/SQL  pro¬ 
gramming  language.  High  mo¬ 
bility  preferred.  40  hrs/wk,  8  am 
-5  pm,  $70,000/yr.  Qualified  ap¬ 
plicants  report/submit  resume 
to:  Terrance  Kinney,  Mgr.,  Arm¬ 
strong  Co.  Team  PA  CareerLink, 
1270  N.  Water  St.,  PO  Box  759, 
Kittanning,  PA,  16201-0759.  Re¬ 
fer  to  Job  Order  No. 
WEB1 15440. 


♦ 


SYSTEMS  ANALYST 
(Multiple  Openings) 

Analyze  &  evaluate  existing  or 
proposed  software  sys.  Dvlp., 
implement  &  improve  programs, 
sys.  &  related  procedures  to 
process  data  using  in-depth 
knowledge  of  the  sys.  dvlp.  life 
cycle.  Encode,  test,  debug  &  in¬ 
stall  operating  programs  &  sys¬ 
tem  software  utilizing  knowledge 
of  RDBMS  environments  &  pro¬ 
gramming  languages.  Bache¬ 
lor's  degree  (or  equivalent)  in 
Comp.  Sci.,  Math,  Engrg.,  Busi¬ 
ness  or  Commerce  plus  2  yrs. 
exp.  in  either  job  offered  or  as 
Programmer  Analyst  or  Software 
Engr.  rqd.  Must  be  proficient  in 
Oracle  or  Sybase  RDBMS  envi¬ 
ronment  as  well  as  JAVA, 
COBAL  or  PL/SQL  program¬ 
ming  language.  High  mobility 
preferred.  40  hrs/wk,  8  am  -  5 
pm,  62,284/yr.  Qualified  appli¬ 
cants  report/submit  resume  to: 
Terry  Faust,  Mgr.,  Washington 
Co.  Team  PA  CareerLink,  Mill- 
craft  Ctr„  Ste.  150LL,  90  W. 
Chestnut  St.,  Washington,  PA 
15301-4517.  Refer  to  Job  Order 
No.  WEB1 15435. 


Network  Analyst/Consultant.  Design  and  deploy  large-scale  enterprise 
LAN  and  WAN  networks  with  multiple  protocols  using  routers,  firewalls 
and  CSU/DSU.  Responsible  for  understanding  customer  needs, 
developing  detailed  project  description  and  managing  the  whole  life 
cycle  of  the  project.  Design  and  configure  advanced  WAN  circuits  us¬ 
ing  56K,  T1 ,  T3,  Frame  Relay,  ISDN  and  ATM  technologies.  Design  and 
implement  switched  and  routed  networks  with  Catalyst  5000  and  2900, 
Cisco  2600,  7500  and  bay  routers.  Responsible  for  configuring  and 
troubleshooting  routing  protocols,  including  RIP,  IGRP,  EIGRP,  OSPF 
and  access-lists  and  route-maps.  Responsible  for  WAN  circuit  and  net¬ 
work  troubleshooting  using  tools  such  as  Sniffer  and  T-Berd.  Install, 
configure  and  manage  NOSs  and  OSs,  including  NT,  Netware,  Sun 
Solaris,  OS400  and  Citrix  Winframe.  Requires:  B.S.  in  Electrical  Eng.  4 
yrs.  exp.  in  the  job  offered  or  as  a  Senior  Network  Engineer.  Exp.,  which 
may  have  been  obtained  concurrently,  must  include  4  years  experience 
designing  and  deploying  large-scale  enterprise  LAN  and  WAN  networks 
with  multiple  protocols  using  routers,  firewalls  and  CSU/DSU  and  4 
years  experience  configuring  and  troubleshooting  routing  protocols, 
including  RIP,  IGRP,  EIGRP  and  OSPF.  EOE.  40  hrs/wk.  Salary: 
$48.00/hr.  Send  resume  (no  calls)  to:  Larry  Bruce,  Branch  Manager, 
New  Boston  Systems,  333  North  Pointe  Center  East,  Suite  125, 
Alpharetta,  GA  30022. 


ENGINEERING 

Software  Engineer  (geocoding)  in  Lebanon,  New  Hampshire.  Requires 
a  Master’s  degree  in  Computer  Science,  Information  Managment, 
Information  Systems,  or  Computer  Information  Systems  and  five  years’ 
experience  in  the  job  offered  or  five  years'  experience  in  defining  data 
structures,  designing  relational  tables  and  writing  applications  to 
manage  relational  databases.  One  year  of  the  stated  experience  must 
have  involved  the  design  and  development  of  text  and  natural  language 
processing  tools.  In  lieu  of  a  Master's  degree,  the  company  will  accept 
a  bachelor’s  degree  and  five  additional  years  of  progressive  experience. 
Define  data  structures,  design  relational  tables  and  write  applications 
to  manage  relational  databases.  Design  and  develop  text  and  natural 
language  prcessing  tools  for  geocoding  systems,  Maintain  entire 
geocoding  database  for  U.S.  and  European  operations.  Review  and 
contribute  to  requirements,  specifications  and  test  plans.  Design  and 
implement  specifications.  Author  design  documents  and  provide  well- 
documented  code  and  process  information.  Identify  and  resolve  issues 
to  ensure  quality  product  is  delivered  on  time.  Engage  in  continuous 
process  improvment.  40  hrs./wk.  8:00  to  5:00.  Salary  $68, 1 00  per  year. 
Apply  with  resume  to:  Ms.  Mary  Gavin,  Vicinity  Corporation,  115  Etna 
Road,  Lebanon,  NH  03766 


Software  Engineer  wanted  to  design,  develop,  maintain  &  refine  soft¬ 
ware  products  using  Object  Oriented  design  &  programming  that  en¬ 
able  optimistic  cost-efficient  transportation  for  both  carriers  &  shippers, 
&  the  web  based  transportation  exchange  market  that  help  to  push 
efficiency  into  the  logistics  industry;  maintain  ongoing  development  of 
a  decision-support  system  that  assists  freight  customers  in  making 
routine  optimization  decisions  by  using  graphical  user  interface 
programming,  shell  scripting,  system  programming,  &  design 
programming;  develop  new  enhancements  &  versions  in  C++  on 
Windows  NT  platform;  &  set  up  &  document  test  processes  by  using 
system  programming  &  debugging  procedures.  Must  have  Master’s 
deg.  in  Comp.  Sci.  &  1  yr.  exper.  coding  software  applications  in  C/C++ 
or  Java,  incl.  exper.  in  Object  Oriented  design  &  programming,  &  at  least 

1  yr.  exper.  or  academic  training  in  web  site  design  &  development  incl. 
using  HTML  &  other  web  techniques  such  as  CGI,  client  side  script  & 
Applet.  (Exper.  can  be  concurrent).  40/hr/wk.  Salary  $72,441/yr.  Send 

2  resumes  to  Case#20002330,  Labor  Exchange  Office,  19  Staniford 
St„  1st  FI.,  Boston,  MA  02114. 


LHS  Communications  Systems,  Inc.  leads  the  way  in  advanced  communications  billing  &  pro-active  customer 
care,  installing  more  client  server-based  billing  &  customer  care  systems  than  any  other  provider  worldwide. 
As  a  global  technology  organization,  we  seek  highly  technical  candidates  to  fill  multifarious  positions  in  out  At¬ 
lanta  global  headquarters,  &  in  our  Latin  American  Division  in  Miami,  as  well  as  other  locations  throughout  the 
U.S.  Some  positions  may  require  a  foreign  language  or  other  special  skills.  Candidates  should  have  a  Bache¬ 
lor  or  Master  degree  (or  equivalent)  &  relevant  exp.  within  the  range  of  6  months  to  2  years,  OR  a  total  of  4  yrs. 
relevant  exp.  with  no  degree. 

SR.  SOFTWARE  ENG.  (multiple  openings).  Duties  include  software  dev.  in  an  OO  (Object  Oriented)  life  cycle 
environment,  oversee  reengineering  efforts  of  cellular  &  telecommunications  billing  system,  &  web-based  ap¬ 
plication  &  distributed  architecture;  research,  analysis,  design,  development;  team  leadership.  May  provide  as¬ 
sistance  to  clients  or  technical  staff  in  Europe  or  Latin  America,  &  be  req'd  to  speak,  read  &  write  Spanish  and/or 
Portuguese,  or  a  popular  European  language  such  as  German,  French  or  Russian.  Requires  prior  use  of  4  or 
more  of  the  following:  OO  technology,  Rational  Rose,  Unix,  Object  Models,  C,  SQL,  Windows,  GUI  technolo¬ 
gy,  JAVA  &  CORBA. 

SOFTWARE  TEST  ENG.  (multiple  openings).  Oversee  function  specs  in  BSCS  software  requirements  in  de¬ 
sign  change  requests,  high  level  designs  functional  specs,  design  &  execute  test  plans  for  problem  solving, 
document  test  defects,  &  prov.  progress  reports  to  management,  to  include  assignment  completion  estimates; 
supports  R&D  dept,  re:  testing  specs.  Requires  prior  use  of  4  or  more  of  the  following:  Oracle,  Windows  plat¬ 
forms,  JAVA,  CORBA,  SQL,  PL/SQL,  C,  TCP/IP  &  Unix,  Sun,  DEC,  &  HP  platforms. 

SOFTWARE  ENG.  (multiple  openings).  Duties  include  complete  software  dev.  life  cycle,  analysis,  design,  cod¬ 
ing  &  unit  testing  for  telecommunications  billing  activities;  time  estimation  of  client  requirements  in  Design 
Change  Requests  for  BSCS  software  packages;  may  prov.  tech  support  for  modules  development,  functional 
design  processes,  remote  installation,  implementation,  config.  issues  &  functional  spec  documents  based  on 
design  request  &  High  Level  Designs  for  customer  product  development;  may  prov.  tech  support  to  Jr.  Engi¬ 
neers  &  development  teams,  &  on-call  support  to  other  depts.  relating  to  specific  software  related  issues;  may 
prov.  product  support  to  customers  in  the  U.S.  &  Latin  America,  8  resolve  defects  that  cannot  be  handled  by 
Customer  Support  &  Release  Support  groups.  May  be  req'd  to  read,  write  &  speak  Portuguese  &/or  Spanish 
languages.  Requires  prior  use  of  4  or  more  of  the  following:  C,  PRO*C,  Oracle,  TCP/IP,  PL/SQL,  SQL,  Win¬ 
dows  platforms,  HTML,  Java,  OO,  PowerBuilder,  SUN,  IBM,  Unix  &  HP  systems. 

PROJECTS  CONSULTANT  (multiple  openings).  Interact  with  client  managers.  IT  personnel,  integrators  &  users 
regarding  functional  aspects  of  each  project,  identify  client  businesses  requirements  &  make  decisions  on  spec¬ 
ifications  for  configurations  &  implementation  of  software  solutions,;  create  enhancement  functional  design 
specifications;  provide  change  management  guidance  to  clients,  oversee  testing  strategies  &  analyze  data¬ 
base  code  defects;  establish  client  hardware  &  software  environment,  assist  client  with  conversion  determi¬ 
nations,  troubleshoot  &  resolve  data  conversion  issues.  Requires  prior  use  of  4  or  more  of  the  following:  IBM, 
DEC,  HP,  SUN,  Unix,  Oracle,  C,  SQL,  JavaScript,  Visual  Basic,  Windows  platforms,  HTML,  PL/SQL  &  TCP/IP. 

SR.  TECHNICAL  ANALYST  (multiple  openings).  Duties  include  change  management,  dev.  testing  strategies, 
analyzing  database  code  to  determine  defects,  creating  technical  design  specs,  troubleshooting  &  resolving 
conversion  issues,  project  life  cycle  issues  such  as  requirements,  design,  dev.,  installation,  conversion  train¬ 
ing,  &  support;  may  prov.  tech  support  to  other  depts  such  as  sales  &  marketing  re:  to  product  design  specs. 
Requires  prior  use  of  4  or  more  of  the  following:  Unix,  SUN,  IBM  &  HP  platforms,  C,  Oracle,  SQL,  TCP/IP  & 
PL/SQL. 

DATABASE  CONSULTANT  (multiple  positions):  Provide  database  administration  support  to  company's  pro¬ 
jects  &  products;  analyze  &  optimize  Oracle  database  environments  &  configurations;  may  provide  database 
performance  analysis  &  tuning,  benchmark  database  architecture,  &  ensure  implementation  &  migration  func¬ 
tions;  may  provide  guidance  to  Jr.  Engineers  &  technical  support  to  R&  D  dept.;  may  provide  technical  support 
for  creation  of  processes  to  initiate  new  product  releases  deliveries,  &  for  updating  Oracle  databases  &  initia¬ 
tion  of  new  code  paths;  may  assist  in  developing  databases  for  translation  purposes  &  create  database  tables 
with  values  &  characters  for  languages;  may  install  &  assist  in  improvement  of  translation  tools;  may  provide 
support  for  translation  issues  regarding  database  or  source  code  for  the  BSCS  Graphical  User  Interfaces.  Re¬ 
quires  prior  use  of  4  mor  more  of  the  following:  Unix,  SUN,  IBM  &  HP  platforms,  C,  Oracle,  SQL,  OLTP,  OLAP, 
TCP/IP,  PL/SQL  &  Windows  platform. 

Director  of  Product  Management  (multiple  positions):  Coordinate  &  manage  new  telecommunications  software 
product  releases,  analyze  new  industry  technology  &  market  trends,  &  support  product  marketing  goals;  re¬ 
view  new  product  designs  &  specify  requirements  for  application  solutions;  chair  inter-department  workshops 
&  meetings,  &  coordinate  creation  of  product  release  announcements;  provide  technical  support  to  Sales  & 
Projects  Staff  for  increasing  sales  &  improving  customer  satisfaction;  coordinate  promotion  of  new  products 
through  presentations  at  conferences,  seminars,  &  road-shows  throughout  the  U.S.  &/or  Latin  America.  Re¬ 
quires  software  development  background.  May  require  ability  to  read,  write,  &  speak  Spanish  &/or  Portuguese 

Submit  resume  to  HR  Coordinator,  LHS  Communications  Systems,  Inc.,  6  Concourse  Pkwy.,  Suite  2700,  At¬ 
lanta,  GA  30328. 


STAFF  SOFTWARE  ENGINEER 
(2  positions  located  in  Atlanta, 
GA)  to  analyze,  design, 
program,  debug,  &  modify 
local,  network,  or  internet- 
related  computer  programs 
for  commercial  or  end  user 
applications  such  as  materi¬ 
als  management,  financial 
management,  HRIS,  or  desktop 
applications  products  using 
DB2  database  on  IBM 
Mainframe  hardware,  QMF, 
COBOL,  JSL,  TSO,  PL1 ,  and 
Windows  95  development  tools 
and  MVS/ESA  programming 
languages;  Write  code  and 
program,  test,  &  debug 
applications  using  current 
programming  language  & 
technologies;  Write  documents 
and  procedures  for  installations 
&  maintenance;  Interface 
with  users  to  define  system 
requirements  and/or  necessary 
modifications.  Require:  B.S. 
degree  or  foreign  equivalent  in 
Computer  Science,  Engineering, 
Business  Administration,  or 
closely  related  field;  Employer 
will  also  accept  any  combination 
of  experience  or  education 
equivalent  for  a  B.S.  degree;  In 
addition  to  the  degree  (or 
equivalent)  job  requires  two  (2) 
years  of  experience  as  a 
Programmer/Analyst,  Consul¬ 
tant,  Project  Manager  or 
Engineer;  Experience  must 
include  two  (2)  years  with  DB2, 
MVS/ESA,  COBOL  and  QMF. 
Salary:  $65,000-$75,000  per 
year,  8  am  to  5  pm,  M-F.  Send 
resume  to  KM-HR,  CheckFree 
Corp.,  6000  Perimeter 
Drive.,  Dublin,  OH  43017;  itca- 
reers  @  checkfree.com 


Software  Engineer,  North  Carolina-Design,  develop  &  implement  soft¬ 
ware  applications  for  wireless  digital  telecommunications  switch  net¬ 
works.  Develop  &  execute  Object  Centered  Test  &  Verification  Envi¬ 
ronment  (OCTAVE)  test  interfaces  for  Asynchronous  Transfer  Mode 
(ATM)  network  testing.  Analyze  performance  of  ATM,  Signalling  Sys¬ 
tem  7  &  Internet  Protocol  data  systems  using  traffic  generation  &  net¬ 
work  monitoring  equipment.  Determine  software  architecture  req'mnts 
using  object-oriented  design  methodologies.  Design  software  using 
high-level  programming  languages  in  a  UNIX  &  VxWorks  real-time  en¬ 
vironment.  Create  ATM  network  interface  &  protocols.  Document  soft¬ 
ware  req’mnts,  incl.  detailed  design  description  &  design  test  plan.  40 
hrs/wk,  M-F,  8am-5pm,  $66,900/yr.  Reqs.  Master's  in  Comp.  Sci  or  En- 
grng  +  6  mos  exp  in  job  offered  or  6  mos  as  Object-oriented  engineer, 
instructor  or  researcher.  Submit  resume  to:  Job  Service,  1105  Briggs 
Ave.,  Durham,  NC  27703,  or  your  nearest  Job  Service  Office.  Refer¬ 
ence  Job  Order  number  NC301 4053  &  DOT  code  030.062.01 0.  All  re¬ 
sumes  must  include  applicant’s  social  security  number. 


SOFTWARE  ENGINEER: 
Analysis,  design,  development, 
testing  and  implementation  of 
different  applications  using  data¬ 
base  such  as  Oracle,  Access. 
Design  of  database,  writing  SQL 
and  generating  the  back  end 
code  using  Pro*C.  Experience  in 
developing  GUI  (Graphical  User 
Interface)  using  Visual  Basic,  Or¬ 
acle  Developer  2000.  Generat¬ 
ing  reports  using  Crystal  Re¬ 
ports.  The  job  duties  are  to 
Design,  Develop,  Database  ad¬ 
ministration,  Monitor  database 
activities,  Tune  the  database, 
Write  Backup  and  Recovery 
procedures,  Install  and  Upgrade 
the  database,  Test  and  imple¬ 
ment  the  software.  Requires 
High  School  in  Sciences  with  4 
years  of  Software  development 
experience.  40  hours  per  week 
at  $  50,000  per  year.  Please 
send  resume  to  Case  # 
20002130,  PO  Box  #  8968, 
Boston,  MA  02114. 


Senior  Software  Engineer  and  Software  Engineer  positions  avail 
able  to  design,  develop  and  implement  software  systems  to  determine 
feasibility  of  design  and  to  direct  software  testing  procedures, 
programming  and  documentation.  Candidates  must  have  one  year  of 
experience  in  job  offered  or  as  a  computer  professional.  Some 
positions  require  additional  year  of  experience  in  a  particular  skills  set 
(see  below).  Bachelors  or  Masters  degree,  or  foreign  equivalent,  is 
required  in  one  of  several  limited  fields:  Computer  Science/Apps, 
Engineering,  Chemistry,  Math,  Physics,  or  scientific  or  business  relat¬ 
ed  field.  In  lieu  of  Masters  degree.  Bachelors  degree,  or  foreign  equiv¬ 
alent,  with  five  years  of  progressive  experience  will  be  accepted.  Work 
involves  extensive  travel  and  frequent  relocation.  Salary  ranges  from 
$70,000  to  $1 20,000  per/yr  depending  on  skill  set  and  experience,  40 
hrs/wk.,  9:00-5:00  p.m.  Please  submit  resumes  to:  Rapidigm,  Jaime 
Lopez,  4400  Campbells  Run  Road,  Pittsburgh,  PA  15205. 

RDBMS:  Informix,  Oracle,  FoxPro,  Sybase,  SQL  Server,  Progress; 
Oracle  RDBMS:  Designer  2000,  Developer  2000,  Oracle  RDBMS, 
SQL’Plus,  Pro’C,  PL/SQL,  SQL’Forms,  SQL'Reports,  SQL'Loader, 
Oracle  Forms,  Oracle  Reports,  SQL’Menu,  SQL'DBA,  SQL'Net, 

GUI:  Windows  95/98/00,  Windows  NT,  Visual  C,  Visual  C++,  C,  C++, 
Visual  Basic,  PowerBuilder,  MFC,  Crystal  Reports,  COM/DCOM, 
CORBA; 

Mainframe:  IBM3090.  IBM  ES900,  MVS,  IMS,  CL/400,  CICS,  TSO, 
VSAM,  COBOL,  JCL,  AS/400,  DB2,  VAX/VMS.  MVS; 

ERP:  PeopleSoft,  SAP,  Baan  or  Oracle  Applications/Financials/ 
Manufacturing/HR; 

Internet  Applications:  ASP,  HTML,  Java  Script,  Java,  Coldfusion. 
Broadvision,  ATG  Dynamo,  Netdynamics,  Websphere,  Java  Beans, 
Front  page,  CGI,  Pearl,  MTS,  IIS; 

CRM:  Siebel,  Clarify,  Oracle  CRM,  SAP  CRM; 

DBA:  Oracle,  Sybase,  Informix,  SQLServer, 

Unix/NT  Administrators:  Sun  Solaris,  IBM  RS/6000,  DG-Digital,  SCO 
Unix,  Windows  NT  Administrators,  HP9000,  HP  UX,  IBM  AIX,  IRIX 


Director-SAP  Business  Process  Improvement:  Hunt  Valley.  MD:  Di- 1 
reefing  various  module  managers  as  the  leader  of  the  SAP  Business 
Process  Improvement  Group,  provide  support  to  our  SAP  systems.  En¬ 
sure  transition  of  SAP  systems  by  applying  knowledge  of  SAP  appli¬ 
cation  in  supply  chain,  manufacturing  &/or  finance.  Manage  SAP  pro¬ 
ject  work  including  software  upgrades,  bolt-ons.  furtetionai 
enhancements  &  integration  of  acquisitions.  Implement  systems  to  ex¬ 
pand  the  functionality  of  SAP.  Compile  &  present  professional  business 
case  for  significant  enhancements  to  SAP  environment.  Direct  ti  .s  work  j 
of  professional,  technical  staff  &  technical  managers.  Manage  the  SAP  \ 
Center  of  Excellence.  Bachelor's  Degree  or  equivalent  in  Computer  Sci  ! 
ence  or  Business  Admin.  &  5  yrs.  experience  in  the  job  offered  or  m  a  • 
related  info,  systems  position  OR  7  yrs.  experience  in  the  job  offered  •  ••"  j 
in  a  related  info,  systems  position  (i.e.:  no  degree).  5  yrs.  experience  j 
must  include  at  least  2  yrs  in  info,  technology  project  management  &  j 
SAP  application  in  a  manufacturing  organization  40  hrs  pe.  wk.  j 
$80,000  peryr.  Forward  resume  to  Tom  Costello,  MIC.  200  .nte  r :  :  at  j 

Circle,  Suite  5000,  Hunt  Valley.  MD  21030. 


Senior  Vice  President,  Director, 
Programs  &  Controls  for  large  fi¬ 
nancial  institution.  Charlotte,  NC: 
Direct  the  budget  of  approx. 
$200  million  annually.  Provide  di¬ 
rection  w/  respect  to  the  dvlp.  of 
strategic  initiatives,  coordinate 
the  implementation  of  strategic 
tech,  initiatives  &  evaluate  tech, 
priorities  &  recommend  new 
technologies  to  enure  maximum 
production  &  optimum  profitabil¬ 
ity.  Requires  BA/BS  degree  in 
Engineering  &  5  yrs.  exp.  in  the 
position  offered  or  as  Managing 
Director,  CIO,  Dir.,  or  Mngr.  The 
5  yrs.  of  reqd  exp  must  have 
been  gained  in  the  fin.  mgnt.  of 
an  info  tech  dept,  (at  least  2  yrs 
of  which  included  managing  a 
budget  in  excess  of  $100  mil¬ 
lion),  &  must  have  included  the 
management  of  larger  scale 
cross  functional  information 
technology  projects.  2  yrs.  of  the 
reqd  exp  must  have  been  gained 
in  the  financial  services  industry 
including  working  with  auditors  & 
regulators.  Send  resume  to  Jane 
Higgins,  FUNB,  1525  West  W.T. 
Harris  Blvd.,  Chit.,  NC  28262- 
0775. 
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Molex  inc  is  a  global  manufacturer  of  electronic,  electrical  and  fiber 
optic  interconnect  products  that  major  industry  players  rely  on 
for  their  success.  Computers,  digital  cell  phones,  micro¬ 
processors  and  more  we're  defining  what's  ^ 

new  for  the  next  century  Join  us  and  ^ 

put  your  engineering  career  on  .  p>\JV 

a  superior  technical  - 

playing  field 


in* 

Project  Leader 


Participate  and  lead  in  systems  development  and  project  implementation  to 
"^satisfy  business  requirements;  test  and  track  the  progress  of  systems  while  ensuring  the 
quality;  and  work  with  a  team  to  design/implement  a  "Best  Practices"  design,  coding, 
testing  and  implementation  methodology  5- 1 0  years'  business  systems  analysis  and 
design  in  a  client  server  or  mainframe  environment  and  2  years'  experience  with  responsi¬ 
ble  business  functional  area  are  required.  Additionally,  previous  experience  as  a  Project 
Leader  is  essential  2-3  years'  in  a  project  management  role  and  as  a  supervisor  as  well  as 
SAP  ABAP/4  programming  and/or  development  experience  are  required. 


Systems  Analyst 


Develop  system  specifications  based  on  business  requirements  to  successfully  meet  the 
objective  and  goals;  track  the  progress  of  systems  in  development  by  using  project  man¬ 
agement  skills  and  tools;  insure  quality  systems;  test  all  functionality  of  new  and  changed 
systems;  and  implement  system  development  efforts.  10  years'  programming  experience 
and  3-5  years'  (6- 1 0  years’  preferred)  in  business  programming  or  business  systems 
analysis  in  client  server  or  mainframe;  and  a  working  knowledge  of  ABAP/4  are  required. 

For  both  positions,  a  BA/BS  in  Math  or  CS  is  required. 

Enjoy  a  very  competitive  salary,  generous  benefits,  professional  growth  and  more. 
Qualified  candidates  please  forward  a  resume  to  Molex  Inc.,  Attn: 

Human  Resources,  Dept.  PL,  2222  Wellington  Court,  Lisle,  IL 
60532.  Fax:  630-548-2899.  E-mail: 
kkatrak@molex.com.  EOE  M/F/D/V  Principals 
Only.  No  Phone  Calls  Please. 


Senior  Business  Consultant 
or  Project  Manager 

Looking  to  settle  down? 

We  are  an  international  leader  in 
our  industry  seeking  a  profes¬ 
sional  who  has  played  a  key  role 
or  leadership  role  in  the  imple¬ 
mentation  of  SAP.  Strong  project 
management,  implementation 
and  leadership  skills  required. 
You  will  work  with  the  Program 
Management  teams  in  applica¬ 
tion  technical  design,  data  con¬ 
version,  testing  and  “go  live”.  Se¬ 
lected  individual  will  continue 
long-term  through  future  up¬ 
grades  and  process  improve¬ 
ments.  Three  -  five  years  experi¬ 
ence  with  SAP.  multiple 
implementations,  and  ten  years 
of  IT  experience  preferred.  Solid 
working  knowledge  of  the  fol¬ 
lowing  modules:  SD.  FI,  MM,  SM 
required.  SAP  configuration,  R/3 
Basis  and  ABAP/4  background  a 
plus. 

We  are  a  rapidly  growing,  indus¬ 
try  leading  organization  offering 
a  complete  compensation  and 
benefits  package  including 
health,  dental,  vision,  life,  dis¬ 
ability,  401 K  with  company 
match  and  more. 

One  of  the  Top  1 00  private 
companies  in  Wisconsin  is 
looking  for  you  I 

Please  send  resume  and  salary 
requirements  to: 

Human  Resources 
Ad#  SAP-  08 
P.O.  Box  250970 
Milwaukee,  Wl  53225 
Or  by  E-mail: 
resumes©  relaymail.net 


World  Class  Opportunities 
Right  Here  In  Dallas 

We  are  looking  for  people  who  like  people. 


MBNA  Hallmark  Information  Services  has  the 
following  position  open  in  DALLAS,  TEXAS: 

Software  Engineer 

Qualified  candidate  will  perform  technical  analysis,  designing, 
coding  and  testing  of  business  applications.  Requires  a  MS  in 
Computer  Science  or  equivalent,  or  a  BS  in  Computer  Science 
or  equivalent  and  five  years  progressive  experience  in 
maintenance  and  development  of  software  applications  using 
programming  languages  such  as  C,  C+  +  or  Java. 

MBNA  offers  competitive  salaries  and  bonuses,  benefits, 
401  (kl  plan  and  tuition  reimbursement.  For  an  exceptional 
career  with  a  company  that  FORTUNE  ranks  among  the  top-ten 
places  to  work  in  the  United  States,  please  send  your  resume 

to:  MBNA  Hallmark  Information  Services,  Inc.,  Corporate 
Staffing,  Attn:  D1 502000,  P.O.  Box  809051,  Dallas,  TX 
75380-9051;  Fax  to  (972)  774-5836  or 
email:  dallas@mbnacareers.com 

We  are  proud  to  be  a  voluntary  Equal 
Opportunity/Affirmative  Action  Employer  ®2000 
MBNA  America  Bank,  N.A, 


MBHK 


AMERICA© 


hp,  one  of  the  "Most  Admired  Companies  in  America"  according  to 
Fortune  Magazine's  latest  ranking  of  U.S.  -  based  companies,  is  a 
global  leader  in  everything  from  computer  systems  and  solutions,  to 
test  and  measurement  systems.  We  have  opportunities  available  in 
Fort  Collins,  Greeley  and  Loveland,  Colorado  in  the  following  positions: 

•  Communications  Manager 

•  Hardware  Design  Engineer 

•  Software  Design  Engineer 

•  Product  Marketing  Engineer/Product  Manager 

•  Member  of  IT  Technical  Staff 

•  Information  Technology  Specialist 

hp  offers  competitive  compensation  and  excellent  benefits,  including 
profit  sharing,  stock  purchases,  401 K  and  a  retirement  plan.  We  invite 
you  to  e:mail  your  resume  indicating  Ad  #8324  to:  resume@hp.com 
(Subject  Line:  Ad  #8324),  or  send/fax  it  to  Hewlett-Packard  Employment 
Response  Center,  Attn:  Ad  #8324,  3000  Hanover  Street,  MS20AZ, 
Palo  Alto,  CA  94304-11 81 .  FAX:  (650)  81 3-3860.  Please  be  sure  to 
include  Ad  #8324  on  your  resume. 

hp  is  an  equal  opportunity  employer  dedicated  to  affirmative  action  and 
work  force  diversity. 

hp 

invent 


Engineer  (Software)  Working  under  close  supervision  of  Lead 
Developer,  design  &  develop  computer  software  programs  using 
various  software  programming  languages  &  tools,  including  C/C++  & 
GUI  development  software  tools  on  UNIX  and  NT  platforms,  Pro  C, 
PL/SQL,  Oracle  Database,  andTCP/IP.Take  system  requirements  and 
translate  them  into  a  solid  application  design  and  code  the  application 
using  current  software  engineering  methodologies,  both  procedural  and 
Object  Oriented.  Requires:  B.S.  Computer  Science  or  related  field,  plus 
working  knowledge  and/or  coursework  in  the  following:  1 .  C  &  C++  in 
UNIX  &  Oracle  database  application  programming  using  PRO  C, 
PL/SQL  on  UNIX  &  data  communication  programming  &  TCP/IP.  2 
Object  Oriented  and  Procedural  Software  engineering  methodologies. 
Location:  Denver,  CO;  Working  Conditions:  M-F  8  a.m.to  5  p.m.  Salary: 
$60,400/yr. 

Reply  by  resume  only  to  Colorado  Department  of  Labor  &  Employment, 
Employment  Programs,  Attn:  Jim  Shimada,  Tower  2,  Suite  400,  1515 
Arapahoe  Street,  Denver,  CO  80202-2117  and  refer  to  job  order 
number:  C04674215. 


Programmer  Analyst.  Sought  by 
Englewood  Colorado  consulting 
company  to  work  in  various 
unanticipated  locations  through¬ 
out  the  U.S.  Under  direct  super¬ 
vision,  analyze,  plan,  develop, 
test  &  document  computer  pro¬ 
grams.  Evaluate  user  requests 
Ssoftware  program  require¬ 
ments  for  new  &  modified  pro¬ 
grams.  Write  specifications,  code 
test  and  debug  computer  pro¬ 
grams.  Customize  hardware  & 
software  to  client  needs.  Use  of 
UNIX,  IBM  RS/6000  &  C++. 
Reqs.  Bachelors  in  Computer 
Science,  Electrical  Engineering, 
or  related  field  of  study. 
$41 ,000/year,  40/hrs/wk,  8AM- 
5PM.  Respond  by  resume  to 
James  Shimada,  Colorado  De¬ 
partment  of  Labor  &  Employ¬ 
ment,  Tower  II,  #400,  1515  Ara¬ 
pahoe  St.,  Denver,  CO  80202 
and  refer  to  Job  Order  No.  CO 
4675150. 


Management  Information 
Software  Engineer  wanted 
by  Database  Analysis  Co  in 
Irvine,  CA.  Must  have  MS  in 
Mgmt  Info  Systms  or  Comp 
Sci  &  3  mos  exp  dvlpg, 
modifying  &  implementing 
database  systems. 
Respond  to:  HR  Dept,  C. 
Gowens,  Plaid  Brothers 
Software,  info@plaid.com 
or  fax  949-743-6392. 


Programmer  Analyst.  Sought  by 
Englewood  Colorado  consulting 
company  to  work  in  various 
unanticipated  locations 
troughout  the  U.S.  Analyze, 
plan,  develop,  test  &  docu¬ 
ment  computer  programs.  Eval¬ 
uate  user  requests  &  software 
program  requirements  for  new 
&  modified  programs.  Write 
specifications,  code,  test,  & 
debug  computer  programs. 
Customize  hardware  &  software 
to  client  needs.  Use  of  HTML, 
JAVA,  JAVA  Scripts,  Oracle 
7.3,  3  database,  MS  SQL  7.0, 
Homesite  MS  Office  & 
Silverstream.  Reqs.  Bachelor’s 
in  Computer  Science,  Computer 
Eng.  Mgmt.  Information 
Systems  or  related  field  of  study. 
Plus  2  yrs  in  the  job 
offered  or  2  yrs  in  a  related 
occupation  including  Sr. 
Programmer  or  Developer. 
$55, 000/year,  40/hrs/wk,  8AM- 
4:30PM.  Respond  by  resume  to 
James  Shimada,  Colorado 
Department  of  Labor  & 
Employment,  Tower  II,  #400, 
1515  Arapahoe  St.,  Denver,  CO 
80202  and  refer  to  Job  Order 
No.  CO  4675144. 


LEAD  PROGRAMMER 
ANALYST.  Research,  design, 
develop  and  support  software 
solutions  in  an  Object  Oriented 
development  enviroment.  Must 
have  BS  in  Computer  Science, 
Physics,  or  related  field,  plus  2 
years'  experience.  Must  have 
knowledge  of  C++  and  Rational 
Rose.  Send  resumes  to: 
Communications  Data 
Services,  Inc.  ATTN:  Angie, 
1901  Bell  Ave.,  Des  Moines, 
Iowa  50315.  EOE. 


SOFTWARE  ENGINEER  (Kansas  City  &  Other  Sites) 
Analyze,  prepare  specifications,  design,  develop,  code,  test,  imple¬ 
ment,  migrate  and  administer  varied  s/w  applns  based  on  functional  re¬ 
quirements  on/using  IBM  RS  6000,  IBM  SP2,  Oracle  7.0,  Developer 
2000,  Designer  2000,  SQL'Forms  3.0,  PL/SQL,  Oracle  Applns  10.7, 
PRO'C,  C,  PERL,  Unix  Shell  Scripting,  Sun  Solaris,  Oracle  Web  Ap- 
pln  Server,  Win  NT,  Interface  with  users,  conduct  training,  provide  en¬ 
hancements,  prepare  documentation,  technical  support  &  maintenance 
for  developed  s/w.  Design  &  develop  scientific  applns,  applying  prin¬ 
ciples  and  techniques  of  Comp  Sci,  Engg.  &  Mathematical  analysis. 
Master's  in  Comp  Sci  or  Comp  Engg  or  Mathematics  or  Electrical  Engg; 
w/1  year  experience  in  the  position  offered  or  as  Systems  Analyst  or 
Programmer  Analyst  or  Support  Engineer,  req'd.  Master's  may  be 
equivalent  degree.  40  hrs/wk,  8am-5pm,  $52,166/yr.  Must  have  proof 
of  legal  authority  to  work  in  the  U.S.  Pis  apply  in  person  to  any  local 
Kansas  Job  Service  Career  Center  or  send  resume  to  KS  Department 
of  Human  Resources  #KS2300117,  Attn:  Jane  W.  Burbridge,  401  SW 
Topeka  Bovd,  Topeka,  KS  66603-3182. 


Software  Engineer.  Research, 
design,  and  develop  computer 
software  systems  for  business 
applications.  Apply  principles 
and  techniques  of  computer  sci¬ 
ence  and  mathematicai  analysis 
to  develop  new  programs  and 
software-based  processes.  Con¬ 
sult  with  hardware  engineers  to 
analyze  and  optimize  hard¬ 
ware/software  interface.  Prepare 
implementation  plan.  Analyze 
feasibility  of  designs  within  time 
and  cost  constraints.  Develop 
applications  using  working 
knowledge  of  SQL  Servers  or 
Oracle,  Visual  Basic,  and  World 
Wide  Web  integration.  40  hrs/wk; 
8:00  am  -  5:00  pm;  $60,000/yr. 
Bachelor’s  degree  in  computer 
engineering  or  related  field  req'd, 
as  is  3  yrs  of  experience  in  the 
job  offered  or  as  a  programmer 
or  applications  developer.  Multi¬ 
ple  openings.  Resumes  and 
Soc.  Sec.  Nos.  to  Indiana  Dept, 
of  Workforce  Development,  1 0 
N.  Senate  Ave.,  Indianapolis,  IN 
46204-2277,  Attn:  DP  Gordon. 
I.D.#  8088305. 


Senior  Database  Administrator/ 
Implementation  Analyst.  Job 
Location:  Chicago,  IL.  Duties: 
Create  and  manage  databases 
in  UNIX  &  NT  environments 
through  startup,  granting 
privileges,  backup,  recovery, 
audit  trails  &  shutdown.  Create  & 
manage  users  &  privileges. 
Configure  the  multi-threaded 
server.  Maintain  data  integrity 
constraints.  Manage  indexes  & 
clusters.  Monitor  both  lock 
contention  &  system  tuning. 
Configure  system  for  UNIX  &  NT 
network  environments.  Apply 
knowledge  of  key  areas  for 
performance  tuning  for  both  the 
database  &  applications.  Imple¬ 
ment  Oracle  auditing  features  to 
identify  database  activity. 
Requires:  B.S.  in  Comp,  or  Info. 
Sci.,  Eng.,  Physics  or  related 
field,  plus  2  yrs  exp.  in  the  job 
offered  or  2  yrs  exp  as  a  System 
Engineer/Project  Leader.  Exp. 
which  may  have  been  obtained 
concurrently,  must  include  2  yrs 
managing  NT  and  UNIX  network 
environments.  Send  resume  to 
Teri  Allen,  marchFirst,  Inc.,  Suite 
3500,  Chicago,  IL  60606. 


Programmer/Analyst.  40  hours/ 
week  from  9  AM  to  5PM.  Basic 
at  $60, 000/year.  Design  and  de¬ 
velop  software  using  IBM  Main¬ 
frame  ES9000,  CICS,  VSAM, 
JCL,  REXX,  COBOL,  DB2,  XDB, 
TSO,  ISPF/PDF,  Fileaid,  Plat¬ 
inum,  QMF,  XPEDITER,  ADW 
Key  4.1,  MVS/ESA,  OS2  3.1, 
Windows  3.1 ,  and  Windows  95. 
Requires  B.S.  Degree  in  Electri¬ 
cal  and  Electronics  and  6 
months  experience  in  job  of¬ 
fered.  Applicant  must  show 
proof  of  legal  authority  to  work 
permanently  in  the  U.S.  Please 
send  resume  to  Illinois  Depart¬ 
ment  of  Employment  Security, 
401  South  State  Street  -  7  North, 
Chicago,  IL  60605,  Attn:  Sheila 
Lindsey;  Reference  #  V-IL 
23545-L.  An  employer  placed 
Advertisement.  No  calls.  Send 
two  copies  of  both  the  resume 
and  the  cover  letter. 


Aptech  Corporation  has  five 
openings  for  Programmer-Ana¬ 
lysts  to  plan,  develop,  test,  pro¬ 
gram,  debug  computer  pro¬ 
grams  using  various  computer 
languages.  Evaluates  user  re¬ 
quest  for  new  modified  program 
and  analyzes,  reviews  and  alters 
program  to  increase  operating 
efficiency  or  adapt  new  require¬ 
ment,  and  write  documentation 
to  describe  pro-gram  develop¬ 
ment,  logic,  coding,  and  correc¬ 
tions.  Applicants  must  possess  a 
Bachelor  Degree  or  its  equiva¬ 
lence  and  two  years  experience 
in  computer  programming. 
Salary  $56,000/  year.  Send  re¬ 
sumes  to  Aptech  Corporation, 
300  W.  Washington,  Suite  1 408, 
Chicago,  IL  60606. 


Software  Engineer.  Sought  by 
Englewood  Colorado  consulting 
company  to  work  in  various 
unanticipated  locations  through¬ 
out  the  U.S.  Researches,  de¬ 
signs  and  develops  computer 
software  systems,  in  conjunction 
with  hardware  product  develop¬ 
ment.  Analyzes  software  re¬ 
quirements  to  determine  feasi¬ 
bility  of  design  within  time  and 
cost  constraints.  Use  of  C/C++, 
JAVA,  Shell  programming,  VB, 
VC++  and  Window  API.  Reqs. 
Masters  in  Computer  Science. 
Plus  1  year  in  the  job  offered  or 
1  year  in  a  related  occupation  in¬ 
cluding  Engineer.  $62, 000/year, 
40/hrs/wk,  8AM-5PM.  Respond 
by  resume  to  James  Shimada, 
Colorado  Department  of  Labor  & 
Employment,  Tower  II,  #400, 
1515  Arapahoe  St.,  Denver,  CO 
80202  and  refer  to  Job  Order  No. 
CO  4674671. 


(ft  careers.com 


Advisory  Consultant,  Austin,  TX. 
Provide  technical  architecture  & 
consulting  services  in  connec¬ 
tion  with  the  design,  integration 
&  implementation  of  middleware 
solutions  for  distributed  systems 
utilizing  object  oriented  (OO) 
technologies.  Conduct  research 
for  problem  solving  &  the  devt.  of 
system  architectures.  Supervise 
the  efforts  of  consulting  staff.  Ex¬ 
ercise  overall  technical  respon¬ 
sibility  for  the  success  of  the  re¬ 
sponsibility  for  the  success  of  the 
project.  Provide  advanced  tech¬ 
nical  training  in  networking  &  dis¬ 
tributed  systems  software  solu¬ 
tions.  Plan  &  conduct  curriculum 
design  &  devt.;  create  learning 
systems  &  training  based  on 
core  competencies.  Conduct 
business  &  developmental  activ¬ 
ities.  Master’s  degree  in  Comp 
Sci,  Mgmt  Info  Systems  or  Elec¬ 
trical  Engg.  req'd  +1  yr  exp  in  job 
ottered  or  1  yr  exp  as  Software 
Engr  or  LAN  System  Adminis¬ 
trator.  1  yr  exp  must  incl  devt  of 
distributed  computing  systems 
using  OO  programming.  C,  & 
DCE;  &  system  administration 
on  UNIX  variants. Travel  to  client 
sites  throughout  the  US  70%  of 
the  time.  40  hrs/wk,  8am  -  5pm; 
$87,500/yr.  Apply  at  the  Texas 
Workforce  Commission,  Austin, 
TX,  or  send  resume  to  the  Texas. 
Workforce  Commission,  1117 
Trinity,  Rm  424T,  Austin,  TX 
78701 ,  JO#TX09441 1 1 .  Ad  Paid 
by  an  Equal  Opportunity  Em¬ 
ployer. 


♦ 


Programmer/Analyst:  Perform 
systems  analysis,  design, 
integration,  application  program¬ 
ming  &  project  management. 
Specific  duties  include  business 
problem  &  solutions  analysis; 
application  program  analysis  & 
solution  design;  complex 
program  development,  unit 
testing  &  integration  testing;  user 
acceptance  testing,  documenta¬ 
tion  &  training;  production 
systems  support  &  problem 
resolution;  PC  software  selec¬ 
tion,  support  and  problem 
resolution;  setting  up  PC's  on 
LAN;  &  project  management  to 
include  scheduling,  estimation  & 
resource  management.  Apply 
knowledge  of  database  design  & 
structured  programming 
techniques.  4  yrs  experience  in 
the  position  offered  or  in  a 
related  programming  position. 
40  hrs  per  wk.  Must  have  legal 
authority  to  work  in  the  U.S. 
Resume  to  Lisa  Baldwin, 
Sterling  Fluids  Systems  (USA) 
Inc.,  2005  Dr.  Martin  Luther  King, 
Jr.  St,  Indianapolis,  IN,  46202. 


♦ 


Information  Technology  Special¬ 
ist.  Dvlps  prgmg  code  utilizing 
langs  &  tools  outlined  in  prgm 
specs  to  carry  out  reqmts  ac¬ 
cording  to  existing  standards. 
Dvlps  reports,  templates,  prgmg 
code,  spreadsheets  &  other 
work  product,  by  interpreting 
prgm  specs,  utilizing  appropriate 
tools,  perform  testing  &  prep 
documentation. Test  prgms  &  re¬ 
view  results  to  detect  &  correct 
errors  prior  to  submitting  test  re¬ 
sults  for  review  &  approval.  Im- 
plmts  prgm.  Perform  systms 
analysis  &  dsgn  on  less  complex 
systms.  Use  COBOL,  B.S.  in  Sci, 
Engg  or  related  field  +  1  yr  exp 
in  job  offd  or  in  related  occupa¬ 
tion  as  Comp  Prgmr.  1  yr  FT  profl 
info  processing  exp  dvlpg  or 
maintaining  comp  systems  &Jor 
prgms  in  COBOL.  40  hrs/wk, 
$44,179/yr.  Must  have  proof  of 
legal  auth  to  work  in  US.  Send 
your  resume  to  Iowa  Workforce 
Ctr,  215  Keo  Way,  Des  Moines, 
Iowa  50309-1727.  Please  refer 
to  JO#  I  A#  1101109.  Employer 
paid  ad. 
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Choice,  in  today  s  job  market,  it  s  pretty  much  ail  yours.  But  finding  the  right  project  can  be  a  job  in  itself.  We  can  help.  Tap  into  our  exclusive 
network  of  hot  start-ups.  service  firms  and  Fortune  1000  companies.  Select  projects  matched  to  your  unique  skills  and  experience.  Take  advantage 
of  powerful  Internet-based  tools  designed  to  help  you  run  your  business  better.  And  do  it  all  from  the  comfort  of  wherever  you  damn  well  please 


SkillsVillage.com'* 


A  new  force  at  work. 


5  Computer  Positions  Available!! 

Relocate  to  the  Queen  City  of 
the  Rockies,  Helena,  MT  where 
you  will  experience  abundant 
outdoor  recreation  and  the  qual¬ 
ity  of  life  is  some  of  the  greatest 
throughout  the  US!  Now  is  your 
opportunity  not  only  to  live  in  a 
beautiful  city  and  state,  but  to 
work  with  leading  edge  tech¬ 
nologies  on  a  dynamic  IT  team! 
Montana  State  Fund  is  seeking 
3  Systems  Engineers,  1  Web 
Security/Development  position, 
and  1  Software  Developer  to  join 
its  professional  staff.  State  Fund 
is  a  progressive  workers'  com¬ 
pensation  insurer  that  utilizes  a 
multi-functional  team  structure  to 
provide  exceptional  products 
and  services  to  its  customers. 
Our  internal  culture  stresses  em¬ 
ployee  empowerment,  individual 
responsibility,  and  rewards  for 
positive  results. 

To  receive  complete  details 
about  these  positions  and  the 
application  process,  you  can  ac¬ 
cess  our  web-site  at  http://mon- 
tanastatefund.com  or  ask  for  the 
Montana  State  Fund  Employ¬ 
ment  Application  Form  and  va¬ 
cancy  brochure  by  calling  406- 
444-9333.  Deadline:  Open  until 
filled,  however,  selection  process 
begins  on  or  about  August  28, 
2000.  EEO. 


Call  your 

Ucareers  Sales  Representative 
or  Janis  Crowley. 

1-800-762-2977 


At  eMERGE  Interactive, 
we’re  bringing 
$40  billion  worth  of 
livestock  to  the 
East  Coast  of  Florida. 
Not  literally. . .  but  by 
using  our  leading  edge 
technology  and  the 
brains  behind  it, 
we  are  taking  the 
livestock  industry  digital 
and  global. 

We’re  the  first  to  do  it, 
and  we  must  be  doing 
it  well,  as  we  were 
recently  named  by 
Forbes.com  as  one  of 


JAVA  P£Q6J?AMMEJ?$ 

Will  develop/maintain  e-commerce  web  solutions  and 
re-design  existing  applications  into  Oracle/Sun  Java 
Framework.  College  degree  and  2-10  years  experience 
with  Java  object-oriented  design  and  development, 
database  connectivity,  networked  applications  and  object 
design  tools  required. 

Where's  the  beef,  you  ask?  Right  here  in  Sebastian, 
Florida  —  just  north  of  West  Palm  Beach  along  Florida's 
breathtaking  Treasure  Coast.  We  offer  excellent 
compensation,  stock  options,  the  latest  technologies,  a 
creative  atmosphere,  high  growth  potential,  40 1  (k),  on¬ 
site  exercise  facility,  performance  awards,  and  a  great 
lifestyle.  Surf s  up! 


Human  Resources  Manager 
10315  1 02nd  Terrace  •  Sebastian,  FL  32958 
Fax:  561-581-3710 
Email:  hr@emergeinteractive.com 

EOE  M/F/D/V 


the  most  promising  www.emergeinteractive.com 

B2B  websites.  Have  fun.. .make  meneq...and  change  the  world.. .FAST! 


Trusted  by  more  hiring  managers 
than  any  IT  space  in  the  world. 

careers 


For  High  Tech  Jobs  go  to  www.dice.com 

&dice.com 

High  tech  jobs  online 


NASDAQ  EWBX  Q)  an  earth  web  service 


Establish  yourself  in  the 

COMPANY 

PERFORMERS 


Are  you  tired  of  the  big  city  hustle,  long  commutes  and  the  “consulting  lifestyle’’? 
Are  you  looking  for  an  outstanding  career  opportunity  in  a  community  environment 
with  an  industry  leader?  If  so,  look  no  further  than  John  Deere  Worldwide 
Headquarters  located  in  Moline,  Illinois. 

For  more  than  a  century,  Deere  has  been  recognized  as  one  of  the  best  companies  to  work  for 
in  America.  At  Deere  you'll  find  a  breadth  of  opportunity  in  a  progressive  environment  where 
excellence,  integrity  and  service  are  all  part  of  our  tradition,  we  currently  have  the  following 
career  opportunities  available  in  the  Moline,  IL  area: 

SAP  Business  Analysts 

Process  and  configuration  experience  is  required  in  any  of  the  core  modules 
including:  Sales  and  Distribution,  Materials  Management,  Production  Planning, 
Quality  Management,  Plant  Maintenance,  Finance  and  Controlling, 
Inventory/Warehouse  Management  and  Human  Resources. 


SAP  Automated  Test  Team  Analyst 

SAP  test,  development  and/or  configuration  experience  is  preferred. 

SAP  ABAP  Developer 

Core  modules,  Workflow,  Forms  and  ED1/1DOC  experience  is  required. 

SAP  Basis  Administrator 

UNIX  administration,  performance  turning,  RS6000  SP/2.  ABAP  tuning  experience 
is  preferred. 

SAP  Security  Analyst 

SAP  DB2  Database  Administration  Analyst 

SAP  Data  Analyst 

SAP  Data  Warehouse  Analyst 


All  of  these  SAP  positions  require  1-5  years  of  related  experience  and  a  BA/BS  degree. 
An  advanced  degree  and  knowledge  of  the  ASAP  methodology  are  preferred,  but  not 
required.  (Dept#CIS-330) 

We  offer  competitive  compensation  and  outstanding  benefits  including  medical  and 
dental  coverage,  life  insurance,  401(K),  relocation  and  tuition  assistance. 


If  you’re  interested  in  a  career  at  Deere,  please  send  your 
resume  indicating  the  Dept#  and  position  in  which  you  are 
interested,  along  with  your  salary  nistory  and  requirements 
to:  Deere  &  Company,  Corporate  Recruiting,  Dept#  CIS- 
330,  RO.  Box  1070,  Moline,  Illinois  61266-1070.  Fax: 
309-749-0041.  Or  e-mail  your  resume  (text  only)  to: 
sdrecrt@deere.com.  (All  responses  MUST  include  the 
Dept#  CIS-330  and  position  title.)  EOE 

www.deere.com 
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If  you  want  to  work  with  a  company  that's  defining  the  future  of  Web-based  business,  your  time 
has  come.  We're  Day  Corporation,  the  first  and  only  organization  to  develop  a  single  solution 
-  Communique™  2  -  that  has  the  sophistication,  flexibility  and  elegance  to  address  every  aspect 


CONSULTANTS 

The  Burton  Group  (www.tbg.com) 
is  a  leading  strategy,  analysis  and 
consulting  firm  providing  in-depth 
network  planning  services  to  For¬ 
tune  1000  companies.  We  have 
on-going  needs  for  Senior  Con¬ 
sultants  with  expertise  in  security 
services,  directory  services, 
LDAP,  PKI,  VPN  and  NOS  tech¬ 
nologies.  Must  have  5+  years 
proven  consulting,  writing  and 
presentation  skills  plus  bachelor’s 
degree  in  computer  science  or  re¬ 
lated  field  or  equivalent  experi¬ 
ence.  Please  send  resume  to 
consulting-opportunities 
©tbg.com  or  fax  to  801/566- 
3611.  EOE. 


of  a  business'  Internet  needs.  As  part  of  Day,  you'll  be  exploring  and  challenging  your  ideas  with  a 
team  of  experts  who  are  focused  on  the  same  objective:  to  continue  developing  technology  that's 
a  breed  of  its  own.  Sound  like  the  opportunity  you've  been  waiting  for?  Come  to  Day. 


PROJECT  MANAGERS 


We’re  seeking  hands-on  leaders  to  oversee  Web  development  projects  for  our  LA  office.  In  addition  to 
heading  a  team  of  Software  Engineers,  you  will  determine  and  address  client  needs,  create  and  initiate 
project  work  plans/schedules  as  well  as  prepare  and  deliver  client  presentations.  This  role  calls  for  a 
self-motivated  individual  who  can  balance  multiple  projects  and  priorities  while  adhering  to  strict 
budgetary  and  time  guidelines.  Requires  strong  client  service  skills  and  a  familiarity  with  current 
Internet  technologies.  Ideal  candidates  will  have  a  background  in  Internet  project  management,  systems 
integration,  technology  consulting,  sales  and/or  marketing. 


SOFTWARE  ENGINEERS 


You’ll  be  developing,  testing  and  refining  our  first-of-breed  technologies.  To  qualify,  you  must  be  a 
versatile  self-starter  experienced  in  client-  and  server-side  scripting  with  one  or  more  of  the  following: 
Java  Script,  HTML,  C++  and/or  DHTML.  Requires  a  BS/BA  (or  equivalent  background)  in  CS  or  a  related 
field  and  experience  with  Web  projects,  ideally  in  corporate  IT  environments.  A  working  knowledge  of  a 
ODBC  compliant  database  technology  (Oracle,  Informix,  MS  SQL  Server,  etc.)  is  also  a  skill  set  we  are 
seeking,  as  is  a  familiarity  with  current  Web  technologies  (XML,  SSL,  Web  servers,  LDAP,  etc.).  Ideally, 
you  will  be  skilled  in  NT  or  UNIX,  consulting  and  project  management. 

Both  positions  involve  local,  national  and,  potentially  international  travel.  Our  compensation  package 
features  all  the  standard  benefits  plus  stock  options,  401(k)  and  unparalleled  opportunities  for  career 
advancement.  For  consideration,  send  resume  to:  Day  Corporation,  Attn:  J.  Coghill,  5514  Wilsher  Blvd. 
Floor  7,  Los  Angeles,  CA  90036.  FAX  (323)  938-9884.  Email:  us.jobs@daynetwork.com.  EOE. 


www.daynetwork.com 


#  Day 


HIGH  TECH 

CAREER  OPPORTUNITIES 

Enhance  your  career  possibilities  with  exceptional  room  for  professional 
growth.  We  are  seeking  individuals  for  a  variety  of  positions  throughout 
the  United  States. 

Siemens  Information  and  Communication  Networks,  Inc. 

Siemens  Information  and  Communication  Mobile,  Inc. 

Siemens  Carrier  Networks,  LLC 
Siemens  Enterprise  Networks,  LLC 
Optisphere  Networks,  Inc. 

•  Software  Engineers/Technicians 

•  Communications  Engineers/Technicians 

•  Test  Engineers/Technicians 

•  Customer  Service  Engineers/Technicians 

•  Field  Engineers/Technicians 

•  Telecommunications  Engineers 

•  Optical  Engineers/Technicians 

•  Programmers/Programmer  Analysts 

•  Systems  Engineers/System  Analysts 

•  Wireless  Engineers/Technicians 

•  Network  Engineers/Technicians 

•  Design  Engineers 

•  Technical  Support  Specialists 

•  Hardware  Engineer/Technicians 

•  Project/Product  Managers 

•  Database  Administrators/Design  Analysts 

•  User  Support  Speciaiists/Supervisors 

•  and  a  range  of  other  IT  and  IT  support  positions. 

Qualified  individuals  will  have  appropriate  Bachelors,  Masters  and/or 
equivalent  technical  experience  for  position  level.  Siemens  provides 
extensive  benefits,  competitive  salaries  and  relocation  packages. 

Email  (preferred)  your  resume  to:  siemensother®  icn.siemens.com.  Or 
mail  your  resume  to:  Siemens,  PO  Box  92171,  Los  Angeles,  CA  90009- 
9998.  Siemens  is  an  Equal  Opportunity  Employer.  EOE  M/F/D/V 


E3ET2S 

Network  Service  Solutions 

NET2S  is  a  leading  International  Consulting  and  Engineering  firm 
specializing  in  networking  and  communications  technologies.  As  an 
industry  leader  we  seek  to  provide  our  Global  500  clientele  with 
creative  people  who  implement  innovative  technological  solutions.  Our 
goal  is  to  offer  unparalleled  Professional  Services  on  mission  critical 
systems  and  networks.  We  are  capable  of  facilitating  all  phases  of  the 
systems  and  engineering  life  cycle:  Planning,  Architecture  and  Design, 
Deployment  and  Integration  as  well  as  Technical  Operations. 
Presently  we  are  seeking  qualified  networking  and  systems  engineers 
to  our  team.  If  you  possess  skills  in  the  following  areas  please  apply: 

•  Sr.  Network  Engineers  (Cisco,  Nortel) 

•  Sr.  Unix  Administrator 

•  TIBCO  Engineer 

•  Network  Security  Specialist 

•  Telecom.  Engineer 

All  positions  require  BS/MS  degree  with  a  minimum  of  2  to  3  years  of 
experience  in  the  field.  Must  possess  excellent  communication  skills 
as  well. 

NET2S  offers  a  competitive  salary,  with  an  excellent  benefits  package 
including  medical,  dental  and  401  (k).  Relocation  assistance  may  be 
provided.  For  immediate  consideration,  please  send  your  resume  to: 
NET2S,  1  West  34th  Street,  Suite  302,  New  York,  NY  10001;  Fax:  (212) 
279-  1960;  Phone  (212)  279-6565;  or  Email:  jobus-ny@net2s.com 
We  are  an  equal  opportunity  employer. 


Better  address? 
k.  Better  compensation? 

Better  training? 

Better  get  in  here. 


SR.  SYSTEMS  MANAGER 
(Software  Engineer):  40 
hrs./week,  8:00am  to  5:00pm 
(M-F)  for  $  64 , 1  05/y  r. ; 
Master’s/Comp.  Science  or 
Mechanical  or  Industrial 
Engineering  &  1  yr.  exp.  in  job 
offered  or  1  yr.  related 
occuptn./Systems  Analysis  &/  or 
Programming  &/or  S/W  Engrn. 
&/ or  Computer  Consulting.  Work 
expr.  in  development  s/w 
systems  and  with  IBM  M/F,  DB2 
and  COBOL.  Carry  out  the 
analysis,  design  and  develop¬ 
ment  of  software  application 
systems  including  project 
management,  for  manufacturing 
and  industrial  systems  in  an  IBM 
mainframe  environment  utilizing 
DB2,  CICS  and  COBOL.  Will 
supervise  3  employees.  Send 
Resume  to  Department  of  Labor, 
Bureau  of  Workforce  Program 
Support,  P.O.  Box  10869, 
Tallahassee,  Florida  32302. 
JOFL2106231 . 
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The  hottest  of  the  hot  skills  three  years  ago  was  a  developer,  programmer  or  integrator  who  knew  the 
language  of  SAP.  Today,  SAP  has  remade  itself  as  companies  throughout  the  world  are  turning  to  the  separate 
modules  as  a  whole-system,  web-enabled  solution  that  works  for  a  business  from  the  moment  contact  is  made 
with  a  customer  through  the  back-office  operations  to  support  of  products  and  services  after  they're  sold. 

It's  a  complex  field,  where  experience  in  business  and  in  implementation  are  critical  to  the  overall  success. 


ExpertSeeker.com 

Boonton,  NJ 

In  the  past  four  years.  Atlas  Technologies  has  grown 
by  2,000  percent  in  its  business  of  providing  informa¬ 
tion  technology  expertise  to  companies.  In  fact,  the 
company  takes  on  a  new  brand  identity  in  January, 
that  of  ExpertSeeker.com.  (On  July  15,  Atlas 
Technology  launched  ExpertSeeker.com  through  a 
virtual  press  announcement.) 

The  idea,  according  to  company  president,  Stephen 
Halasnik,  is  to  provide  a  one-stop  shop  for  employers 
looking  for  high-level  information  technology  permanent 
staff  or  consultants.  ExpertSeeker.com  bridges  the  gap  of 
a  job  board  with  a  staffing  company  by  delivering  the 
lightning  speed  of  the  Internet  with  the  qualification 
process  that  only  a  human  being  can  perform,  thus 
giving  hiring  companies  the  ability  to  quickly  bring 
on  expert-level  talent. 

"Using  our  patented  E-Resume  process,  clients  go  in 
and  fill  out  a  data  sheet  on  the  kind  of  person  they're 
looking  for.  Then  ExpertSeeker.com  does  the  rest," 
says  Halasnik. 

It's  more  than  a  mere  matchmaker  game  though. 
E-Resume  provides  clients  with  a  URL  address  where  they 
can  go  to  look  at  a  potential  candidate's  background  -  a 
summary  of  past  experiences,  a  resume,  a  sound  bite  of 
the  individual's  technical  interview,  a  photograph,  com¬ 
pleted  reference  checks  and  results  of  a  technical  test. 
"The  client  can  then  make  a  quicker,  better-informed 
decision  about  bringing  someone  in,"  Halasnik  says. 

ExpertSeeker.com  continues  to  search  out  experts  to 
include  in  its  database,  including  those  with  SAP  skills. 
"We  do  not  look  for  people  who  have  just  SAP  ABAP 
programming  skills.  We're  talking  about  someone  who 
can  help  companies  achieve  their  goals,  identify  what  is 
needed  to  make  the  implementation  a  success  and  move 
the  whole  company  forward.  These  experts  are  major 
problem  solvers.  Our  customers  are  paying  for  experts 
who  know  what  should  occur,  what  could  go  wrong  and 
how  to  make  SAP  work  at  its  fullest. 

"When  searching  for  experts,  our  clients  look  on  resumes 
for  in-depth  descriptions  of  projects.  We  used  to  be  told 
that  less  is  more  in  resumes.  Not  so  anymore,"  he  says. 


"We  look  for  resumes  that  define  projects  and  the 
expert's  exact  role  -  what  was  the  business  issue  and 
how  did  they  respond?" 

While  ExpertSeeker.com  does  hire  individuals  as 
full-time  employees,  Halasnik  says  the  majority  of 
senior  IT  professionals  want  to  be  independent  within 
the  ExpertSeeker.com  network. 

"There  are  several  reasons  why  an  individual  would 
prefer  ExpertSeeker.com  over  any  other  firm  that  offers 
consulting-type  engagements,"  he  explains.  "You'll  be 
working  with  a  firm  that  knows  the  IT  industry  in  depth, 
and  that  offers  high  paying  jobs.  We  get  the  best  jobs, 
jobs  that  are  critical  to  a  company  and  that  offer 
intellectual  intrigue  to  you.  While  you're  working, 
we're  promoting  you,  giving  you  exposure  as  an  expert 
to  help  you  establish  or  further  your  reputation.  We  do 
this  through  our  lecture  series  and  through  our  dedicat¬ 
ed  sales  force.  Just  like  in  Hollywood  where  all  the  stars 
have  agents,  we  are  your  agent." 


John  Deere 

Moline,  IL 

Anyone  with  experience  around  heavy  equipment  or 
farming  knows  the  name  John  Deere.  Less  known  is 
that  this  160-year-old  American  manufacturer  today  is 
a  worldwide  provider  of  heavy  equipment.  Through 
acquisitions  such  as  the  recent  purchase  of  Timberjack 
forestry  equipment  in  Europe,  the  company  is  operating 
worldwide  and  has  plans  to  grow  at  a  tremendous  rate 
over  the  next  decade. 

"We  see  SAP  as  a  backbone  system  to  support  our 
business  initiatives,"  explains  Sheila  Mixdorf,  team 
leader  for  the  SAP  Technical  Team.  "We're  currently 
rolling  out  the  SAP  systems  globally,  and  over  the 
next  six  months  will  further  develop  the  systems  to 
web-based  applications."  The  objective  is  better 
business  integration.  "Our  world  presence  requires 
integrated  information  and  data,"  explains  Mixdorf. 

To  address  growth  and  the  expanded  use  of 
integrated  systems,  Julia  Mahoney-Hansen, 
information  systems  team  leader  within  the  Corporate 
Staffing  Department,  is  working  with  Mixdorf  to  iden¬ 
tify  people  who  have  technical  SAP  experience,  but 
who  also  have  experience  with  the  multifunctional 
business  processes  served  by  SAP  applications.  "We 
need  people  who  have  a  combination  of  business 
process  and  technical  expertise  in  all  of  the  SAP 
modules,  as  well  as  the  cross-application  tools  such 
as  Work  Flow  and  Application  Integration  tools," 
explains  Mixdorf.  "This  is  end-to-end  use  of  SAP  as 
an  enabler,  from  where  we  first  touch  the  customer 
to  total  support  following  the  sale." 

Mahoney-Hansen  says  selling  Deere  to  potential 
employees  rests  on  several  key  points.  "Deere  has 
been  around  a  very  long  time,"  she  says.  "Because  of 
the  breadth  of  the  company,  the  global  application, 
and  the  variety  of  challenges  we  offer,  you  can  get 
the  experience  of  working  for  several  different 
businesses  all  within  one  company.  You  can  assist  with 
implementation  around  the  world,  or  if  you  want  to  be 
closer  at  home,  we  can  offer  those  opportunities,  too. 
One  thing  we  make  clear  to  everyone  is  that  you  will 
have  the  opportunity  for  multiple  job  changes  and 
challenges.  That  makes  this  company  a  great  place 
to  be." 


For  more  job  opportunities  with  SAP  companies,  turn  to  the  pages  of  IT  Careers. 

If  you'd  like  to  take  part  in  an  upcoming  IT  Careers  feature,  contact  Janis  Crowley,  650.312.0607  or  janis_crowley@itcareers.net. 
Produced  by  Carole  R.  Hedden  •  Designed  by  Aldebaran  Graphic  Solutions,  Inc. 
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Network  World  Seminars 
V  BVBfltS  ancl  Events  are  0lle  ai'd 
-  two-day,  intensive  semi¬ 
in  cities  nationwide  covering  the  latest  networking  technologies, 
f  our  seminars  are  also  available  for  customized  on-site  training, 
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Sieve, 

continued  from  page  1 

filtering,  which  means  users 
don’t  have  to  download  e-mail 
they  want  filtered. 

•  Prohibiting  users  from  cre¬ 
ating  filters  that  would  harm 
the  performance  or  security  of 
the  overall  e-mail  system. 

•  Supporting  graphical  user 
interfaces  (GUI)  that  make  it 
easier  for  end  users  and  admin¬ 
istrators  to  create  filters. 

Mike  Green,  a  senior  mes¬ 
saging  analyst  with  Thomson 
Financial  in  Boston,  says  Sieve 
sounds  like  a  useful  tool,  as  he 
manages  Sendmail  and 
Microsoft  Exchange  servers 
that  support  8,000  employees. 

“It  would  be  good  to  have  a 
common  filtering  environment 
that  lets  me  set  the  same  filters 
across  our  Sendmail  servers 
and  our  Exchange  mail 
servers,”  Green  says.  “It  would 
also  be  nice  to  offer  [server- 
side]  filtering  to  the  end  users 
to  manage  their  mail  .  .  .  but  I 
think  only  the  more  technically 
literate  would  utilize  it.” 

Sieve  is  an  e-mail  filtering 
language  that  will  be  sup¬ 
ported  in  e-mail  server  and 


in  upcoming  versions  of  their 
e-mail  software. 

“After  years  of  develop¬ 
ment,  Sieve  is  ready  for  prime 
time  and  actual  products  now,” 
says  Matt  Wall,  acting  CEO  of 
Cyrusoft,  which  will  release  in 
October  a  version  of  its 
Mulberry  e-mail  client  soft¬ 
ware  that  supports  Sieve. 
“Sieve  looks  like  a  no-brainer 
to  me.  It’s  really  simple,  and  it 
meets  a  very  specific  need.” 

Sieve  replaces  Procmail,  a 
hard-to-use  Unix  freeware  pack¬ 
age  that  provides  server-side  e- 
mail  filtering,  and  proprietary' 
client-side  e-mail  filtering  found 
in  Microsoft  Outlook,  Qual¬ 
comm’s  Eudora  and  others. 

“We  are  really  excited  about 
Sieve  as  a  vehicle  for  doing 
server-side  filtering,”  says  Wiley 
Hodges,  director  of  product 
management  at  Sendmail, 
which  plans  to  release  Sieve- 
compliant  products  during  the 
next  12  to  18  months.  Send¬ 
mail  doesn’t  recommend  the 
use  of  Procmail  because  of  its 
weak  security.  “We  think 
there’s  real  potential  here  to 
finally  slay  the  Procmail  beast 
once  and  for  all,”  Hodges  says. 

Sieve  lets  end  users  create  fil¬ 


Partners  to  address  content  delivery 


BY  TERHO  UIMONEN 

Inktomi,  Adero  and  AOL  last 
week  announced  Content 
Bridge,  an  alliance  of  technol¬ 
ogy  and  network  service  pro¬ 
viders  aimed  at  improving  the 
speed  and  reliability  of  content 
delivery  over  the  Internet. 

Content  Bridge  members 
will  provide  a  unified  plat¬ 
form  for  content  delivery 
across  all  participating  net¬ 
works  to  raise  the  end-to-end 
performance  of  the  Internet 
for  content  providers  and  end 
users,  says  Inktomi  CEO  David 
Peterschmidt. 

“This  transforms  the  Internet 


from  a  bit  machine  to  a  seam¬ 
less  content  delivery'  platform,” 
he  says. 

Inktomi  will  provide  the 
core  network  software  technol¬ 
ogy  for  Content  Bridge,  which 
is  scheduled  for  launch  later 
this  year.  Network  services 
provider  Adero  will  take  the 
role  of  ensuring  that  content  is 
updated  across  all  member  net¬ 
works  and  provide  centralized 
billing  and  settlement  services 
for  cross-network  transactions. 

The  software  is  already 
undergoing  testing  at  AOL, 
which  shortly  will  become  the 
first  ISP  to  deploy  it,  Peter¬ 
schmidt  says. 


Other  initial  participants  in 
the  alliance  are  Digital  Island, 
Exodus  Communications,  Gen¬ 
uity,  Mirror  Image  Internet, 
Madge.web  and  NetRail. 

Although  the  alliance  will 
level  the  play  ing  field  for  basic 
content  delivery  services 
among  the  participating  net¬ 
work  operators,  it  will  not  take 
away  the  competitive  advan¬ 
tages  each  network  provider 
offers  in  terms  of  more 
advanced,  value-added  ser¬ 
vices,  says  Ruann  Ernst,  Digital 
Island  CEO. 

Uimonen  is  an  IDG  News 
Service  correspondent. 


Lessening  the  e-mail  load 


Sieve  is  a  technology  that  could  help  network  managers  establish 
corporate  e-mail  filtering  policies  across  different  mail  systems 
and  enable  end  users  to  better  manage  large  volumes  of  e-mail. 


Internet  e-mail  (regular) 
Internet  e-mail  (priority) 
Spam 


The  Sieve  filters  are  stored 
on  the  e-mail  server  software, 
which  sorts  incoming  mes¬ 
sages  according  to  a  user’s  fil¬ 
ters  before  the  user  receives 
his  e-mail.  Server-side  e-mail  fil¬ 
tering  is  useful  for  mobile 
users  who  want  to  set  up  dif¬ 
ferent  filters  for  their  PCs,  lap- 


©  Sieve  may  be  used  to 
forward  all  desired  e-mail 
to  an  end  user's  PC,  or  may 
be  instructed  to  forward 
"priority"  messages  to  a 
handheld  or  other  device. 


Internet 
e-mail  server 


Sieve-enabled 
LAN  e-mail  server 


Internet 


©  Sieve  filters,  defined  by  end 
users  or  e-mail  administrators, 
are  stored  on  corporate  Internet 
and  LAN  e-mail  servers.  The 
filters  check  the  header 
information  on  incoming 
messages  and  kill,  prioritize 
or  forward  messages  as 
instructed. 


client  software.  As  an  open 
Internet  standard,  Sieve 
would  potentially  work  with 
any  e-mail  system  and  run  on 
any  operating  system. 

Network  managers  will  see 
Sieve-compliant  products  hit 
the  market  soon.  Already, 
Critical  Path,  Sendmail  and 
Cyrusoft  plan  to  support  Sieve 


User  1  's 
handheld 
device 


Trash 


ters  based  on  e-mail  header 
information  through  a  GUI  in  e- 
mail  client  software.  The  filters 
might  include  putting  all  mes¬ 
sages  from  mailing  lists  into  par¬ 
ticular  folders,  prioritizing  e-mail 
from  certain  people,  deleting 
e-mail  from  other  people  and 
forwarding  only  specific  types 
of  e-mail  to  a  handheld  device. 


tops  and  handheld  devices. 

“I  use  Sieve  internally  to  fil¬ 
ter  all  of  my  mail,”  says  Randall 
Gallens,  a  staff  engineer  at 
Qualcomm  working  on  the 
protocol. “I  get  several  hundred 
pieces  of  e-mail  per  day.  Most 
of  it  gets  thrown  out.  The  rest 
gets  filed  automatically.  I  have 
multiple  mailboxes  and  three 


or  four  different  machines,  but 
all  my  e-mail  looks  the  same. 
The  Sieve  filter  looks  at  the 
messages  and  files  them  into 
the  right  shared  folders.” 

Sieve  developers  hope  the 
technology  will  bring  e-mail  fil¬ 
tering  to  the  masses.Today,  less 
than  5%  of  Internet  users  filter 
their  incoming  e-mail,  accord¬ 
ing  to  surveys  conducted  by 
Cyrusoft.  Filtering  will  become 
more  critical  as  e-mail  volume 
grows.  Framingham,  Mass.,  mar¬ 
ket  research  firm  IDC  predicts 
worldwide  e-mail  volume  will 
triple  to  more  than  25  billion 
messages  per  year  by  2005. 

The  only  way  that  e-mail  fil¬ 
tering  systems  like  Sieve  will 
become  widespread  is  if  they 
are  easy  to  use,  says  Mark 
Levitt,  director  of  collaborative 
computing  at  IDC. 

“Whoever  can  create  that 
incredibly  simple-to-use,  menu- 
driven  configuration  for  cre¬ 
ation  and  editing  of  filters  for 
end  users  is  going  to  win, 
regardless  of  whether  they’re 
using  a  common  programming 
language  designed  specifically 
for  e-mail  filtering,”  Levitt  says. 

One  challenge  for  Sieve  is 
that  it  doesn’t  have  support 
from  the  major  e-mail  client 
software  vendors,  such  as 
Microsoft,  Lotus  or  Netscape. 
Microsoft  and  Lotus  say  they 
are  waiting  until  Sieve  is  fully 
standardized  before  they  sup¬ 
port  the  technology. 

“We’re  going  to  need  some 
client  buy-in,”  says  Tim  Show- 
alter,  the  primary  developer  of 
Sieve  and  a  member  of  the  tech¬ 
nical  staff  at  Minipoint.  “You 
could  put  a  Sieve  engine  on  a 


Web  server  and  do  it  all  through 
a  Web  browser.  But  I  think  it 
will  fundamentally  work  better 
and  look  better  on  an  e-mail 
client  than  on  a  Web  client.” 

One  company  that  plans  to 
offer  a  Sieve-enabled  Web 
client  is  Critical  Path,  which 
also  will  support  Sieve  in  the 
next  release  of  its  enterprise- 
class  Mscribe  Messaging  Server 
due  out  this  fall. The  Web  client 
will  allow  end  users  to  access 
the  basic  functions  of  Sieve 
through  a  GUI. 

“The  functionality  offered  by 
Sieve  is  something  we’ve  had  in 
our  mail  servers  and  outsourced 
mail  service  for  some  time.  But 
the  ability  to  use  a  standard  lan¬ 
guage  is  certainly  welcome,” 
says  Mike  Serbinis,  chief  security 
officer  of  Critical  Path. 

Another  challenge  for  Sieve 
is  whether  it  will  be  powerful 
enough  to  replace  e-mail  filter¬ 
ing  capabilities  found  in  pro¬ 
prietary  and  open  source 
offerings. 

Sieve  developers  have  creat¬ 
ed  an  extension  for  vacation 
auto-response  messages  that 
they  hope  to  standardize  along 
with  the  basic  Sieve  protocol. 
Other  extensions  are  in  the 
works. 

Despite  these  hurdles,  Sieve 
developers  are  optimistic 
about  the  technology 

“Sieve  is  one  of  those  things 
that  can  make  your  life  a  lot  eas 
ier  and  help  you  get  organized, 
but  it  won’t  give  you  an  extra 
five  hours  a  day,”  Qualcomm’s 
Gallens  says.  “I  think  that  in  t 
few  years,  people  won’t  bt  able 
to  imagine  doing  e-maii  without 
Sieve  capabilities.’  A 
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ONLINE  TOOLS  AID  INTERNAL  HELP  DESKS 


Agrowing  number  of  corporations 
—  from  JCPenney  to  General 
Electric  to  Cisco  —  are  rolling  out 
e-support  tools  to  their  employees 
as  an  inexpensive  way  of  replacing 
in-person  and  telephone-based 
desktop  support. 

The  two  leaders  in  the  market  for 
Internet-based  PC  diagnostic  and  repair 
tools  are  Motive  and  Support.com,  both  of 
which  have  increased  sales  dramatically 
this  year.  Unlike  tech  support  Web  sites 
for  customers,  employee-oriented 
e-support  offerings  include  both  client 
and  server  software  that  work  together  to 
provide  a  higher  level  of  automation. 

Corporate  e-support  systems  offer  fea¬ 
tures  such  as: 

•  Self-healing,  which  involves  automat¬ 
ically  discovering  a  faulty  application  or 
setting  on  a  system  and  fixing  it. 

•  Self-service,  which  lets  end  users 
find  answers  to  questions  and  solve  prob¬ 


lems  on  their  own. 

•  Communications  via  chat,  messaging 
and  remote  control  with  a  support  analyst 
if  the  end  user  can't  solve  his  own 
problem. 

"About  30%  of  the  problems  can  get 
addressed  through  self-service.  The  rest 
have  to  be  escalated  to  a  support  ana¬ 
lyst,"  says  Dave  Malcolm,  vice  president 
of  development  at  Motive.  "We  cut  the 
time  it  takes  to  resolve  the  other  70%  of 
the  calls  because  of  the  context  and  intel¬ 
ligence  gathered  by  our  tools." 

Corporate  e-support  tools  are  used 
primarily  to  fix  misconfigured  applica¬ 
tions,  faulty  network  settings,  printer  and 
modem  problems,  and  dial-up  access 
difficulties. 

But  corporate  e-support  solutions  are 
not  for  the  faint-hearted  or  cash-strapped. 
They  cost  upwards  of  $1 00,000,  require 
customization,  and  a  typical  rollout  takes 
several  months. 


Cisco,  for  example,  will  begin  rolling 
out  Support.com's  tools  to  its  35,000 
employees  in  September.  Cisco's  global 
help  desk  offers  online  documentation 
and  frequently  asked  questions  on  an 
internal  Web  site,  but  the  company  is 
looking  for  new  capabilities  such  as  auto¬ 
matically  fixing  a  user's  system  without 
losing  personal  settings  or  data. 

"We  were  looking  for  a  product  that 
would  allow  us  to  avoid  the  tech  support 
call  in  the  first  place,"  says  Gail  Potter,  IT 
analyst  with  Cisco  Desktop  Services. 

Potter  says  empowering  end  users  to 
solve  their  own  problems  will  let  Cisco's 
global  help  desk  scale  to  meet  the  grow¬ 
ing  number  of  Cisco  employees.  "[Other¬ 
wise]  we  would  have  to  throw  body  after 
body  onto  this  problem  to  provide  the 
same  level  of  customer  satisfaction  that 
we  do  today,"  she  says. 


E-support, 

continued  from  page  1 

Dubbed  e-support,  the  trend 
has  been  embraced  by  Cisco, 
Lucent,  Nortel,  Dell,  Hewlett- 
Packard,  Compaq  and  others. 
These  companies  are  spending 
hundreds  of  thousands  of  dol¬ 
lars  on  their  tech  support  Web 
sites,  adding  automated  tools 
far  beyond  online  searching  of 
product  documentation. 

The  e-support  trend  is  a 
boon  to  network  managers, 
who  can  use  these  Web  sites  to 
isolate  and  fix  hardware  and 
software  problems  without 
having  to  spend  the  time  or 
money  to  call  the  vendor’s 
tech  support  telephone  line. 
Network  managers  can  deploy 
the  same  underlying  e-support 
technologies  to  serve  their 
own  employees  and  customers 
(see  story,  right). 

Neena  Taskar,  a  consulting 
network  engineer  with  People- 
Soft,  visits  Cisco’s  e-support 
Web  site  a  couple  of  times  per 
day  as  she  manages  a  network 
that  features  70  Cisco  routers 
and  serves  9,000  users. 

“I  hardly  ever  call  Cisco 
because  I  can  get  the  product 
documentation  that  I  need  off 
the  Web  site, ’’Taskar  says.  “If  it’s 
not  a  network-down  emer¬ 
gency,  it’s  really  hard  to  call 
Cisco  and  wait  for  a  call  back. . 

.  .  It’s  faster  to  go  to  the  Web 
site  and  look  up  what  you 
want.” 

Although  Taskar  praises  the 
search  capabilities  and  soft¬ 
ware  downloads  available  on 
Cisco’s  site,  she  says  the  bug¬ 


tracking  feature  doesn’t  work 
well  and  the  troubleshooting 
tools  are  too  basic. 

“I’d  like  to  see  more- 
advanced  troubleshooting 
tools  and  more  white  papers 
on  newer  technologies,”  she 
adds. 

Shortcomings  aside,  these 
sites  are  growing  in  popularity, 
experts  say. 

“Customers  want  correct 
answers  immediately  in  the 
medium  of  their  choice,”  says 
Tony  Adams,  a  senior  analyst 


following  support  services  for 
Dataquest.  “Customers  really 
like  and  give  higher  satisfac¬ 
tion  ratings”  to  tech  support 
Web  sites  vs.  traditional  tele¬ 
phone  support. 

Such  e-support  is  a  major 
undertaking,  with  some  com¬ 
panies  dedicating  50  or  more 
specialists  to  create  content 
for  their  support  sites.  De¬ 
ploying  automated  PC  diagnos¬ 
tic  tools  from  such  vendors  as 
Motive  and  Support.com  costs 
$100,000  or  more.  Still,  indus¬ 
try  watchers  say  automated 
Web-based  tech  support  sys¬ 
tems  produce  savings  in  the 
long  run. 

“Manufacturers  are  begin¬ 
ning  to  recognize  the  fact  that 
toll-free  telephone  support  is 
extremely  expensive,”  says 
Richard  Dean,  program  man¬ 
ager  of  market  research  firm 
IDC’s  network  support  and 
integration  services  research. 
“The  trend  in  the  industry  is  to 
get  away  from  expensive  tele¬ 
phone  support  and  make 
investments  in  online  support.” 

One  of  most  advanced 
e-support  Web  sites  is  Cisco’s 
Technical  Assistance  Center 
(TAC),  which  is  available  to 
the  company’s  enterprise  cus¬ 
tomers.  About  a  year  ago, 
Cisco  began  investing  heavily 
in  the  site’s  content  and  self- 
service  features  as  a  way  of 
stemming  the  flow  of  tele¬ 
phone  calls  to  its  four  assis¬ 


tance  centers  around  the 
globe,  which  employ  more 
than  1,000  engineers. 

Since  then,  the  TAC  staff  has 
grown  from  a  handful  of  folks 
to  100  people  contributing 
content.  Meanwhile,  traffic  on 
the  Web  site  has  grown  sixfold 
from  350,000  page  views  per 
month  last  September  to  more 
than  2.2  million  page  views 
per  month  in  June. 

The  online  product  docu¬ 
mentation  is  the  most  fre¬ 
quently  visited  section  of  the 
site.  An  increasing  amount  of 
traffic  is  derived  from  automat¬ 
ed  tools  such  as  the  IP  Subnet 
Calculator,  which  creates  an  IP 
addressing  scheme,  and  the 
Stack  Decoder,  which  gives 
network  managers  trouble¬ 
shooting  information  when  a 
router  crashes. 

A  newer  tool  is  the  Output 
Interpreter,  which  analyzes  the 
most  popular  commands  on 
Cisco  routers  and  switches, 
and  provides  feedback  to  cus¬ 
tomers  on  possible  problems. 
Meanwhile,  the  Compatibility 
Adviser  lets  users  enter  the 
equipment  they  have  and  the 
equipment  they  want  to  buy 
to  make  sure  it  will  work 
together. 

Cisco  is  seeing  benefits  from 
investments  in  TAC.  June  was 
the  first  month  the  company 
saw  a  reduction  in  the  growth 
rate  of  the  telephone  calls 
received  by  its  technical  sup- 


— Carolyn  Duffy  Marsan 


port  centers. 

“Customers  are  better 
enabled  to  solve  their  own 
problems  now  that  our  team 
has  brought  the  information  to 
the  Web,”  says  Steve  Gordon, 
director  of  the  TAC  Web  ser¬ 
vices  team. 

In  October, TAC  plans  to  add 
support  for  the  SNMP  in  its 
Output  Interpreter  tool. 

“What  we’re  doing  is  tying 
the  Output  Interpreter  to  the 
network  management  systems 
so  the  person  in  the  network 
operations  center  can  take  two 
or  three  or  four  more  advanced 
steps  and  help  them  reduce 
the  time  to  resolution,”  Gordon 
says. 

SNMP  support  is  just  a 
glimpse  of  the  advanced  self- 
service  tools  Cisco  plans  for 
TAC. 

“Our  customers  can  look 
forward  to  the  increasing  intel¬ 
ligence  and  expert  system 
capability  of  our  tools,”  says 
Sean  Iverson,  TAC  marketing 
manager. 

One  such  customer  is  John 
Tiso,  a  senior  consultant  with 
Networked  Information  Sys¬ 
tems  in  Woburn,  Mass.,  who 
consults  TAC  several  times  a  day. 
Tiso’s  favorite  features  are  prod¬ 
uct  documentation,  bug  track¬ 
ing  and  service  call  opening. 

“We  train  all  of  our  technol¬ 
ogists  on  how  to  use  the  TAC 
site  to  research  solutions  to 
See  E-support  page  81 


The  new  look  of  self-help  tech  support 

Cisco’s  Technical  Assistance  Center  is  a  prominent  example 
of  a  new  breed  of  online  self-help  services.  They  are  being 
provided  by  vendors  that  are  looking  to  make  such  services 
faster  and  less  expensive  than  telephone  help  desks. 


Netscape;  Qste  Technical  Assist. 
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Security  flaw  found  in  Network  Associates'  PGP 


BY  ELLEN  MESSMER 

European  cryptographic  re¬ 
searchers  last  week  uncovered 
a  security  flaw  in  the  Unix  and 
Windows  versions  of  Network 
Associates’  PGP  encryption 
software  that  lets  attackers 
decrypt  and  read  messages  of 
targeted  victims. 

German  researcher  Ralf 
Senderek  revealed  the  vulnera¬ 
bility  in  a  paper  published 
online  at  http:senderek.de/ 
securityAey-experiments.html. 
Stephen  Early,  research  assistant 
in  the  security 
group  at  University 
of  Cambridge  Com¬ 
puter  Laboratory, 
confirmed  the  find¬ 
ings  and  shared  the 
information  with  a 
British  crypto  news- 
group.  That  sent 
Network  Associates, 

Inc.  (NAI),  which 
markets  the  PGP 
public-key  encryp¬ 
tion  software  used 
by  millions  on  the 
Internet,  scrambling  to  fix  the 
problem. 

The  flaw,  which  is  found  in 
Versions  5  5  through  6.5. 3  of 
the  product,  involves  the  way 
PGP  implements  a  data- 
recovery  feature  that  lets  an 
authorized  third  party  access 
data  encrypted  with  a  user’s 
PGP  certificate. 

“The  issue  is  an  attacker  can 
add  an  additional  key  to  the 
user's  public-key  certificate  to 
be  used  as  an  additional  decryp¬ 
tion  key,”  says  Mike  Jones,  PGP 
business  line  manager. 
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Mike  Wallach,  president  of 
PGR  says,  “To  our  knowledge, 
no  customer  data  has  been 
compromised.’’ 

It  turns  out  the  flaw  has 
existed  since  1997,  when  Phil 
Zimmermann,  the  original 
developer  of  PGP,  added  the 
data-recovery  feature  as  he 
sought  to  commercialize  the 
product.  NAI  bought  PGP  in 
December  1997. 

As  a  safety  measure,  corpora¬ 
tions  want  a  way  to  decrypt 
data  that  their  employees 
encrypt. 

The  federal  gov¬ 
ernment  was  also 
pushing  hard  at  the 
time  to  get  software 
vendors  to  add  so- 
called  “key  escrow” 
type  encryption 
technologies  to 
their  products  so 
law  enforcement 
could  obtain  access 
to  encrypted  data 
on  demand. 

Now  an  NAI  em¬ 
ployee,  Zimmer¬ 
mann  last  week  apologized  for 
PGP’s  poorly  implemented 
data-recovery  feature  in  a  note 
posted  on  the  Web,  saying,“We 
regret  this  important  bug.” 

The  flaw  allows  an  attacker 
to  decrypt  PGP  data  but  does 
not  let  the  attacker  imperson¬ 
ate  the  PGP  certificate  holder, 
Jones  says. 

Early,  the  University  of  Cam¬ 
bridge  researcher  who  but¬ 
tressed  the  findings  outlined 
in  the  Senderek  report,  said 
the  PGP  vulnerability  arises 
because  PGP  “mistakenly” 


Please  include  mailing  label  from  front  cover  of  the 
publication. 

Network  World  can  be  purchased  on  35mm  micro¬ 
film  through  University  Microfilm  Int.,  Periodical 
Entry  Dept.,  300  Zebb  Road,  Ann  Arbor, Mich.  48106. 

PHOTOCOPYRIGHTS:  Permission  to  photocopy  for 
internal  or  personal  use  or  the  internal  or  personal 
use  of  specific  clients  is  granted  by  Network  World, 
Inc.  for  libraries  and  other  users  registered  with  the 
Copyright  Clearance  Center  (CCC),  provided  that  the 
base  fee  of  $3.00  per  copy  of  the  article,  plus  50 
cents  per  page  is  paid  to  Copyright  Clearance 
Center,  27  Congress  Street,  Salem,  Mass.  01970. 

POSTMASTER:  Send  Change  of  Address  to 
Network  World,  P.0.  Box  3090,  Northbrook,  IL  60065. 

wm.  % 

Copyright  2000  by  Network  World,  Inc.  All  rights 
reserved.  Reproduction  of  material  appearing  in 
Network  World  is  forbidden  without  written  permission. 

Reprints  (minimum  500  copies)  and  permission  to 
reprint  may  be  purchased  from  Reprint 
Management  Services,  147  West  Airport  Road, 
Lancaster,  PA  17606-5363,  (717)  560-2001. 

USPS735-730 


accepts  additional  decryption 
keys  which  are  outside  the 
signed  part  of  the  public  key. 

“Anyone  who  subsequently 
uses  a  public  key  that  has  been 
tampered  with  [using]  a  vulner¬ 
able  version  of  PGP  will 
unknowingly  be  making  their 
encrypted  messages  readable 
by  the  holder  of  the  private  part 
of  the  additional  decryption 
key,”  Early  stated  in  an  e-mail  to 
Network  World.  “It  is  possible 
for  a  ‘bad  guy’  to  modify  a  pub¬ 
lic  key  such  that  messages 
encrypted  to  the  modified  pub¬ 
lic  key  are  readable  by  him.” 

NAI  has  taken  a  central 


E-support, 

continued  from  page  80 

problems,”  Tiso  says.  “It  in¬ 
creases  our  efficiency,  saves  us 
time  and  ultimately  saves  our 
customers  money  because 
we’re  able  to  solve  their  prob¬ 
lems  quicker.” 

Meanwhile,  Lucent  launched 
its  e-support  initiative  —  called 
eSiglit  —  in  May  to  provide 
users  of  its  modems,  routers  and 
switches  with  self-help  capa- 
bilities.The  site  features  product 
documentation,  troubleshoot¬ 
ing  aids,  software  patches,  trou¬ 
ble-ticket  entry  and  live  chat 
with  technical  support  staff. 

Lucent  built  eSight  around  a 
knowledge  management  system 
from  Primus  that  lets  end  users 
describe  a  problem  and  receive 
likely  solutions.The  site  also  fea¬ 
tures  integration  with  a  Doc- 
umentum  Web  publishing  sys¬ 
tem  to  ensure  online  product 
documentation  is  current  with 
print  manuals.A  50-person  team 
develops  content  for  eSight. 

“ESight  isn’t  just  about  ser¬ 
vices,”  says  Jim  DiRenzo,  e-busi¬ 
ness  director  for  Lucent’s 
NetworkCare  group.  “It’s  about 
ease  of  use  and  navigation.  No 
documentation  is  more  than 
two  clicks  away.” 

So  far,  eSight  seems  to  be  hit¬ 
ting  the  mark.  DiRenzo  says  it 
attracts  1 ,000  visitors  a  day  and 
has  20,000  registered  users.  In  a 
July  visitor  survey,  half  of  the 
respondents  said  visiting  eSight 
saved  them  from  making  a  tele¬ 
phone  call  to  Lucent’s  tech  sup¬ 
port  line. 

DiRenzo  says  Lucent  plans  to 
add  decision  support  and  net¬ 
work  design  tools,  network 


server  in  Santa  Clara,  contain¬ 
ing  PGP  public-key  certifi¬ 
cates,  offline  until  the  prob¬ 
lem  is  resolved.  As  of  press 
deadline,  NAI  expected  to 
have  the  software  fix  for  PGP 
available  for  download  by  last 
Friday  at  5  p.m. 

The  patch  that  NAI  expects 
to  release  would  correct  two 
problems.  It  would  prevent  any 
additional  decryption  keys 
from  being  added  to  any  field 
in  the  PGP  certificate.  It  would 
also  verify  where  additional 
decryption  keys  come  from  to 
ensure  user  certificates  haven’t 
been  altered. 


management  services  and 
online  consulting  to  eSight  next 
year. 

Companies  that  invest  in 
tech  support  Web  sites  are 
quick  to  reap  rewards.  Consider 
Adelphia,  the  fifth-largest  cable 
Internet  access  provider  in  the 


U.S.,  which  recently  spent 
$350,000  on  e-support  soft¬ 
ware  from  Motive. 

Adelphia  installs  a  copy  of 
Motive’s  PC  diagnostic  tool  on 
its  customers’  systems,  letting 
them  run  speed  tests,  fix  brows¬ 
er  problems  and  establish  net¬ 
work  settings  without  the  help 
of  Adelphia’s  tech  support 
team.  Customers  that  need 
extra  help  can  send  e-mail  to 
Adelphia  analysts,  who  have 
access  to  diagnostic  informa¬ 
tion  from  the  customer’s  sys¬ 
tem  and  can  quickly  pinpoint 
the  source  of  the  problem. 


Jones  is  angry  that  the  Euro¬ 
pean  researchers  publicized 
their  findings  without  first 
informing  NAI  of  the  flaw.  “That 
was  irresponsible,”  he  says. 

NAI  believes  the  vulnerabili¬ 
ty  is  quite  difficult  to  exploit. 
You  have  to  modify  the 
sender’s  public-key  certificate, 
make  sure  the  sender  would 
have  a  copy  of  that  and  modify 
the  recipient’s  key  as  well, 
Jones  says. 

“The  reason  the  researchers 
could  discover  it  at  all  is 
because  we  publish  the  source 
code  for  peer  review,”  Jones 
adds.  3 


Chris  Hanlon,  director  of 
national  support  operations  for 
Adelphia,  says  it  costs  around 
$15  per  tech  support  tele¬ 
phone  call,  and  the  company 
receives  40,000  calls  per 
month.  “Any  way  that  we  can 
defer  those  costs  has  a  huge 


[return  on  investment]  poten¬ 
tial,”  Hanlon  says. 

Since  rolling  out  the  Motive 
software,  Adelphia’s  tech  sup¬ 
port  Web  site  is  handling  1,500 
self-service  incidents  a  week, 
and  the  average  time  it  takes  to 
resolve  a  tech  support  tele¬ 
phone  call  has  dropped  from 
17  minutes  to  7  minutes.  “Our 
goal  is  to  handle  90%  of  our 
calls  in  under  4  minutes," 
Hanlon  says. 3 
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NAI's  Zimmermann 
says,  "We  regret  this 
important  bug." 
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Online  self-service  support 

Most  e-support  Web  sites  have  the  following  features: 

•  Users  must  identify  themselves  to  qualify  for  access  and  to  permit 
personalized  service. 

•  Users  can  submit  trouble  tickets  to  the  telephone  or  onsite  tech  support 
staffs  and  check  the  status  of  pending  requests. 

•  Product  documentation  and  online  help  that  provide  context-sensitive 
answers  to  questions. 

•  Communications  features  that  allow  users  to  send  e-mail  to  or  engage  in 
live  chat  with  a  support  specialist. 

•  Automated  tools  that  let  customers  configure  products,  determine 
interoperability,  and  diagnose  and  fix  problems. 

•  Community  features  such  as  bulletin  boards  that  let  customers  interact 
with  each  other  to  solve  problems. 

•  Bug  fixes,  downloadable  software  patches  and  software  updates. 
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Plug-ugly  interfaces  down  to  the  bone 


or  many  of  you,  the  following 
observation  may  seem  obvious,  but 
I  will  make  it  anyway:  Windows  is 
ugly.  G  rather  wonder  whether  I 
should  start  watching  over  my 
shoulder  for  hit  men  sent  out  by 
Microsoft’s  graphic  design  depart¬ 
ment  ...  on  second  thought,  given 
the  number  of  critics  of  their  out¬ 
put,  I  would  suspect  it  will  be  a 
while  until  they  get  to  me.) 

Windows  fails  miserably  in  the 
aesthetics  department.  And,  in  my 
opinion  (and  that  of  many  other 
people),  in  the  usability  depart¬ 
ment  as  well  (one  can  hardly  call 
Alt-Tab  or  Alt-Space  intuitive  ways 
to  get  basic  windows  control 
operations  done). 

Now,  it  has  always  been  a  tenet 
of  the  Windows  world  and,  for  that 
matter,  the  Mac  world  that  started 
this  whole  foolish¬ 
ness,  that  applications 
should  conform  to 
interface  standards. 

And  what  have  we 
wound  up  with?  Well, 
in  the  Mac  world 
things  aren’t  too  bad, 
but  they  aren’t  great 
—  the  Mac  interface 
has  lost  much  of  its 
clean  lines  and  sim¬ 
plicity,  while  in  the 
Windows  world,  well, 
would  “plug-ugly”  be 
ivi  i\  iv  a  good  description? 

GIBBS  Of  course,  operating  system 

user  interfaces  aren’t  one-dimen¬ 
sional.  They  consist  of  graphical 
conventions,  visual  architectural 
designs,  component  behaviors  and 
services,  and  any  given  interface 
can  be  ugly  in  one  or  more  dimen¬ 
sions.  It  just  so  happens  that 
Windows  is  ugly  in  most  of  them. 

Just  look  at  the  problems  that 
beset  Windows  after  all  these 
years  —  a  billion  user  interface 
snafus  that  are  maddening  at  best. 

I  have  applications  with  modal 
dialog  boxes  that  disappear 
behind  the  main  application  win¬ 
dow  (all  you  can  do  is  kill  off  the 
application),  system  tray  items  that 
vanish  when  Internet  Explorer 
misbehaves  (is  that  pathetic  or 
what?)  and  application  interfaces 
that  occasionally  (and  for  no 
apparent  reason)  slow  to  a  crawl! 

And  I  guess  that  while  I’m 
being  unpleasant  about  Windows, 

I  should  tilt  at  a  couple  of  other 


targets:  BeOS  —  an  operating  sys¬ 
tem  I  love!  Really  nice  to  use, 
clean  design,  but  those  damn  tabs 
on  each  Window  frame.  Ugh. 

And  then  there’s  NetWare. 

Again,  an  operating  system  I  am  in 
awe  of,  but  ConsoleOne!  Give  me 
a  break.  It  is  slow  and  clunky.  And 
worse  still,  throw  out  the  Console- 
One  graphical  user  interface 
(GUI),  and  you  have  a  barely  usa¬ 
ble  command-line  interface  (CLI) 
underneath.  I  have  nothing  against 
CLIs,  but  when  you  have  an  oper¬ 
ating  system  as  complex  as  Net¬ 
Ware  you  need  something  to  make 
life  organized,  and  Novell’s  applica¬ 
tions  that  use  the  company’s 
eccentric  original  GUI  don’t  cut  it. 

And  along  with  the  ugly  inter¬ 
faces  comes  ugly  customer  and 
technical  service.  I  contend  that 
the  quip  that  beauty  may  be  only 
skin  deep  but  ugly  goes  all  the 
way  to  the  bone  is  especially  true 
when  you’re  talking  operating  sys¬ 
tem  user  interface  architectures. 

Want  to  see  creative  application 
interface  design?  If  you  haven’t 
looked  at  it  before,  check  out  Kai 
Krause’s  Kai’s  Power  Tools,  an 
excellent  graphics  utility.  But  what 
made  the  application  stand  out 
was  the  weird  user  interface  layout 
—  it  worked  beautifully  because 
Kai  cared  about  usability  (and 
obviously  thought  that  Windows 
wasn’t  right  for  his  purposes)  and 
about  beauty  —  he  cared  that 
everyone  who  saw  the  interface 
took  one  look  and  said  “Wow!” 

My  alter  ego  reviewed  a  prod¬ 
uct  called  Window  Blinds  in 
Gearhead  a  few  weeks  ago  (see 
www.nwfusion.com,  DocFinder: 
9635)  that  shows  you  what  differ¬ 
ent  “skins”  can  do  for  Windows. 
You  absolutely  must  try  this  utility, 
the  results  are  intriguing  and 
provocative. 

So  what  should  a  corporate 
desktop  user  interface  look  like? 
Should  users  have  to  learn  conven¬ 
tions  such  as  Alt+Tab  to  switch 
applications?  Should  users  have  to 
learn  much  of  anything  about 
applications?  Indeed,  is  it  possible 
to  have  applications  (and  for  that 
matter  operating  system  environ¬ 
ments)  that  are  really  intuitive? 

Select  control-N  to  send  me  a 
neu>  message  at  nwcolumn® 
gibbs.com. 


Quiz  time:  Some  low-life  just  snatched 
your  laptop  and  is  sprinting  away  with  your 
livelihood  tucked  under  his  arm  while  you 
stand  there  slack-jawed. 

Do  you  a)  Dial  91 1  to  report  the  theft?  b) 

Dial  91 1  to  ask  for  an  EMT  to  restart  your 
heart?  or  c)  Fling  your  cell  phone  at  the  flee¬ 
ing  miscreant? 

Granted,  these  are  not  attractive  options. 

Soon  you  may  have  a  fourth  choice,  how¬ 
ever,  courtesy  of  a  start-up  called  Lucira 
Technologies  that  is  set  to  debut  its  Secure 
PC  technology  this  week.  Lucira  founder  Ravi 
Hariprasad  wants  you  to  resist  that  long-shot 
temptation  to  toss  your  phone  in  favor  of  using  it  to  call  his  company, 
which  will  activate  the  Secure  PC  tracking  system  that  you  had  the 
foresight  to  install  on  your  machine  before  it  was  stolen. 

Once  the  theft  is  reported  to  Lucira,  the  company's  Cyber  Recovery 
Center  starts  monitoring  for  any  sign  that  the  machine  has  been  con¬ 
nected  to  the  Internet.  When  a  connection  is  detected,  both  the  laptop 
owner  and  local  police  are  notified. 

But  that's  not  the  most  interesting  aspect  of  Secure  PC,  which  has 
competitors  such  as  CompuTrace  and  CyberAngel  that  also  track 
stolen  machines. 

Refocus  on  that  exact  moment  when  you  realized  your  computer 
was  leaving  the  building  without  you.  Chances  are  it  wasn't  the  loss  of 
the  laptop,  per  se,  that  had  you  in  need  of  a  defibrillator.  It's  data  loss 
that  causes  cardiac  arrest. 

Secure  PC  promises  to  help  get  your  data  back  —  or  at  least  make 
sure  it  isn't  misappropriated  —  regardless  of  what  happens  to  the 
laptop.  While  this  feature  won't  be  available  until  year-end,  users  will 
be  able  to  visit  the  Lucira  Web  site  and  predefine  what  they  would 
like  to  happen  to  their  data  if  the  system  succeeds  in  locating  the 
stolen  laptop. 

"You  define  whether  you  want  that  data  encrypted,  compressed 
and  then  uploaded  to  our  servers  for  your  retrieval,  or  just  deleted," 
Hariprasad  says. 

Ah,  but  won't  the  thief  catch  on  that  he's  been  busted? 

"It's  completely  invisible,"  Hariprasad  says  of  the  data  liberation, 

"to  the  point  where  if  they  start  writing  an  e-mail  and  try  to  send  it  and 
that  requires  some  element  of  uploading,  our  system  backs  off  and 
let's  them  do  it  and  then  comes  back  for  the  data." 

OK,  i'll  try  that  instead  of  throwing  the  phone. 


PAUL 

MCNAMARA 


CMGI  Field?  As  a  long-suffering  New  England  Patriots  season- 
ticket  holder,  Buzz  has  plopped  his  fanny  on  the  cold  aluminum 
benches  of  Schaefer  Stadium  (named  for  a  barely  potable  beer), 
Sullivan  Stadium  (named  for  a  bungling  team  owner)  and  Foxboro 
Stadium  (named  for  a  small  town  with  no  other  claim  to  fame).  They 
are  one  and  the  same  place. 

In  two  years  this  dump  will  be  replaced  by  a  facility  that  will  carry 
the  CMGI  name  in  exchange  for  a  $7.6  million  annual  payment  to  the 
Patriots:  less  than  what  quarterback  Drew  Bledsoe  earns,  but  still  real 
money,  even  by  Internet  standards. 

"CMGI  believes  that  this  is  a  one-of-a-kind  opportunity  to  further 
enhance  the  overall  brand  of  the  company,"  boasts  a  new  Web  site 
devoted  solely  to  the  stadium  (www.cmgifield.com). 

They've  got  smart  money  managers  at  CMGI,  an  Internet  investment 
company  in  Andover,  Mass.  But  you  can  rest  assured  that  many  Patriots 
fans  will  question  the  wisdom  of  the  firm's  latest  funding  decision.  After 
all,  this  team  hasn't  won  a  championship  in  well . . .  well,  ever. 

Before  last  week's  announcement  from  CMGI,  there  had  been 
reports  that  another  Internet  company  —  job-search  site  Monster.com 
—  was  angling  for  the  naming  rights. 

Too  bad  that  didn't  pan  out.  Monster  Stadium  would  be  a  much 
cooler  name  than  CMGI  Field. 

Comments ,  tips  and  speculation  about  a  Patriots  Super  Boivl 
victory  go  to  buzz@nwiv.com. 
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ANNOUNCING  A  SERVER 


POWERFUL  ENOUGH 
TO  SERVE  UP  FOUR 
#1  BENCHMARKS 

THE  NEW  IBM  AS/400e™  MODEL  840 


With  over  700,000  systems  shipped  to 
customers  in  over  150  countries,  the  IBM 
AS/400e  is  already  the  world’s  most  popular 
multiuser,  midrange  business  computer. 

And  now,  the  new  Model  270  and  800  family 
brings  a  new  level  of  performance  to  AS/400e  transaction 
servers  -  along  with  new  levels  of  speed,  availability  and 
scalability,  setting  new  standards  across  the  industry. 

#1  TPC-C™  BENCHMARK  rating.  From  its  inception,  the 
AS/400®  was  designed  to  handle  the  most  important 
transactions  in  your  business  -  taking  orders.  And  the 
new  AS/400e  Model  840  has  achieved  the  #1  TPC-C 
benchmark  rating  for  single-server  processing  (the 
standard  for  transactions).* 

This  means  faster  performance  (3.6  times  faster  than  the 
previous  AS/40Qe). 

#1  BENCHMARK  RATING  FOR  VOLANOMARK.  The  AS/400e 
is  designed  for  e-business  and  the  Web  -  and  the  new  800 
series  earned  the  #1  benchmark  rating  for  VolanoMark 
(a  100  Percent  Pure  Java™  benchmark).  That  means  faster 
Java  performance.  It’s  the  first  server  to  achieve  a  6-digit 
score  on  Volano  LLC’s  2.1.2  benchmark. 


#1  RANKING  FOR  SPECJBB2000.  The  AS/400e 

Model  840  achieved  a  #1  ranking  for  the 
SPECjbb2000  benchmark  rating  (measures 
transaction  performance  for  Java-based  appli¬ 
cations).  The  result  is  faster  e-business  per¬ 
formance,  online,  over  the  Web,  to  thousands 
of  users  simultaneously. 

#1  NOTESBENCH  benchmark.  The  AS/400e  Model  840 
sets  a  new  world  record  for  Lotus®  Domino®  scalability 
and  performance,  successfully  handling  75,000  concurrent 
NotesBench  R5  mail  and  calendaring  users  with  an  average 
response  time  of  just  276  milliseconds.  The  result  is  faster 
e-mail  performance  for  online  users. 

PERFORMANCE  POWERED  BY  INNOVATIVE  TECHNOLOGY. 

The  AS/400e  Model  270  and  800  family  is  powered  by 
the  world’s  first  production  microchips  incorporating 
IBM’s  leading  silicon-on-insulator  and  copper  wiring 
technologies.  The  addition  of  SOI  alone  can  increase  per¬ 
formance  up  to  20%  to  30%  beyond  the  use  of  copper 
chip  technology. 

For  more  information  on  the  new  AS/400e  270  and  800 
family,  go  to  ibm.com/as400/benchmarks5 


e-business 


AS/400e  840  TPC-C  result  has  a  price  performance  of  $59.35/tpmC  and  an  availability  date  of  9/15/00.  Performance  claims  based  on,  respectively,  TPC-C  benchmarking 
(see  www.tpc.org  for  details),  VolanoMark,  (see  www.volano.com/benchmarks.html  for  details),  Specjbb2000  benchmark  (see  www.spec.org  for  details),  and  NotesBench 
benchmark  (see  www.notesbench.org  for  details).  All  claims  are  current  as  of  7/26/00.  IBM,  AS/400,  AS/400e  and  the  e-business  logo  are  trademarks  or  registered  trademarks 
of  International  Business  Machines  Corporation  in  the  United  States  and/or  other  countries.  Lotus,  Domino  and  NotesBench  are  trademarks  or  registered  trademarks  of  Lotus 
Development  Corporation.  TPC  is  a  trademark  of  Transaction  Processing  Council,  Inc.  Java  and  all  Java-based  trademarks  are  trademarks  of  Sun  Microsystems,  Inc.  in  the  United 
States  and  other  countries.  All  other  trademarks,  registered  trademarks  and  service  marks  are  the  property  of  their  respective  owners.  ©2000  IBM  Corp.  All  rights  reserved. 
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Christmas  Sale 


Y2K  Bouquet 

Ring  in  the  new  year 
millennium  with  our 
commemorative  Y2K 
bouquet!  $49.99- 
$69.99 


buy  now  Q 
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Customer  Perks 


Register  Here 
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1-800-FLOWERS.COM  is  one  of  the  world  s  leading  and 
fastest  growing  online  retailers.  With  a  complex  network  of 
thousands  of  florists  worldwide  offering  over  7,500  products 
—  reliability,  speed,  and  efficiency  are  crucial. 

Unicenter  TNG®  monitors  and  manages 
1 -800-FLOWERS. COM’s  worldwide  infrastructure  and  support 
systems,  enabling 
them  to  fulfill 
online  orders  with 
subsecond  response 
times  to  over  eight 
million  customers. 

To  help  ensure  the  reliability  of  1  -800-FLOWERS.COM, 
Unicenter  TNG  proactively  detects  and  corrects  problems 
before  they  impact  performance.  From  the  front-end  website 
to  the  underlying  network  infrastructure,  Unicenter  TNG 
provides  the  most  complete,  end-to-end  eBusiness 
management  solution  available. 

Join  1-800-FL0WERS.C0M,  and  wake  up  and  smell  the  roses.  It’s  time  to  reap  the  rewards  of  eBusiness  with 

Unicenter  TNG.  For  more  information,  visit  us  at  internetsolutions.ca.com. 
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Conference:  October  3-6,  2000  •  Expo:  October  4-6,  2000 

San  Jose  Convention  Center  •  San  Jose,  California 


Application  Service  Providers 

*V\ORID 


CONFERENCE  &  EXPO 


•  What  is  an  ASP? 

•  Do  you  understand  the  entire  range  of  outsourcing  options? 

•  Are  you  informed  about  ASP  services  and  products? 

•  What  is  the  competitive  advantage  of  outsourcing  IT?  How  can 
it  improve  your  business?  How  has  outsourcing  IT  improved 
your  competitors’  business? 

Get  the  answers  before  someone  asks  you  the  questions! 

As  the  only  major  ASP  event  focused  on  the  end-user,  ASPWorld 
Conference  &  Expo  provides  a  unique  educational  opportunity  designed 
for  corporate  and  IT  decision-makers  who  are  evaluating  outsourced 
applications  from  a  business  and  technical  perspective! 

Sponsored  by  leading  visionaries,  analysts,  users  and  suppliers 
in  the  ASP  marketplace,  this  brand-new  event  lets  you  learn  all  your 
ASP  options  right  now  all  on  one  show  floor! 
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In  addition  to  your  free  Expo  Badge,  registrants  receive  the  following 
valuable  resources  critical  to  understanding  this  emerging  market: 

•  Up-to-date  market  data 

•  Decision  Support  Guide 

•  ASP  Market  Taxonomy 

•  Information  on  the  latest  ASPs  and  services 

•  Special  introductory  sessions  addressing 
your  questions 
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Register  early  for  special  savings! 

To  Exhibit,  please  call  toll  free  1-877*696-0459 
To  Attend,  please  register  online  at  www.aspworldexpo.com 

ASPWorld  Conference  &  Expo  •  3  Speen  Street,  Suite  320,  Framingham,  MA  01701 

©2000 IOG  World  Expo.  All  rights  reserved.  All  other  trademarks  contained  herein  am  the  property  oi  their 
respective  owners. 
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1-800-FLOWERS.C0M  is  one  of  the  world’s  leading  and 
fastest  growing  online  retailers.  With  a  complex  network  of 
thousands  of  florists  worldwide  offering  over  7,500  products 
—  reliability,  speed,  and  efficiency  are  crucial. 

Unicenter  TNG®  monitors  and  manages 
1 -800-FL0WERS. COM’s  worldwide  infrastructure  and  support 
systems,  enabling 
them  to  fulfill 
online  orders  with 
subsecond  response 
times  to  over  eight 
million  customers. 

To  help  ensure  the  reliability  of  1-800-FL0WERS.C0M, 
Unicenter  TNG  proactively  detects  and  corrects  problems 
before  they  impact  performance.  From  the  front-end  website 
to  the  underlying  network  infrastructure,  Unicenter  TNG 
provides  the  most  complete,  end-to-end  eBusiness 
management  solution  available. 

Join  1-800-FL0WERS.C0M,  and  wake  up  and  smell  the  roses.  It’s  time  to  reap  the  rewards  of  eBusiness  with 

Unicenter  TNG.  For  more  information,  visit  us  at  internetsolutions.ca.com. 
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